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GLOSSARY 


Acknowledge - Operator action which indicates reading of a 
message. No blockage of system activities will be induced. 

Boeing Aerospace Thermal Bus System - The prototype thermal bus 
system as described in the Test Article Description (TAD) . 

Confirmation - Operator action which indicates reading of a 
message and permission granted to proceed with proposed action. 
System activities are blocked. 

Control - Actions taken by the operator or expert system that 
changes or maintains the state of the system. 

DACS - The Thermal Test Bed (TTB) DACS is a system of hardware 
and software that provides data collection and performs control 
functions for Space Station Thermal Management System thermal 
test articles. DACS can also allow for real-time trend 
monitoring, analysis, and fault detection, provide temporary data 
storage and retrieval during stand-alone operation, and allow 
growth as the test bed evolves. 

Detection - The search and recognition process used to spot off- 
nominal behavior . 

Faults - A single fault that could result in a directly related 
system fault. 

Isolation 

in software - The pinpointing of a particular object or set of 
objects that are responsible for an off-nominal 
behavior . 

in hardware - The actions taken to partition a part of the 

thermal bus fluid loop from the rest of the bus. 

Recovery - Actions taken to return to the same operational state 
or hardware configuration. 

TTB - The TTB is an evolutionary program, providing the Space 
Station program with critical elements of thermal technology 
development and integrated system performance assessment. 

Primary goals of the TTB are: development of a ground-based 

system representative of t e Space Station Thermal Management 
System (TMS) to verify rea: _ness of two-phase thermal technology 
for use in the initial operational capability (IOC) Space 
Station; and to provide a mechanism by which advanced technology 
thermal control concepts are evaluated at the system level for 
Space Station applications. 

Uncertainty - Uncertainty reasoning is a mechanism which is used 
to measure the degree of belief of a part' ~ular piece of 
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knowledge. It enables evidence to be gathered to determine the 
degree to which a proposition is true. 

Systems Autonomy Demonstration - The computer hardware and 
software that support TEXSYS, HITEX, TDAS and the BATBS. 

Validation - Testing of a system by operation to prove that it 
produces the desired results. In this phase of testing the 
Expert System operates the BATBS in a continuum of fully manual 
to fully autonomous mode. 

Verification - Testing of a system by analysis to prove its truth 
and accuracy. In this phase of testing Expert System rules, 
models and knowledge base will be evaluated against requirements 
and engineering knowledge for its ability to perform with the 
BATBS. 
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l.o introduction 

AS the National Aeronautics and Space Administratio^ (NASA, ^ 
progresses tSrtapor?an«°anrpo?enfiafpa5back a o e f hi^P' 
autonomous spacecraft subsystems. 

The Crew and Thermal Systems Divisi on' (CTSD, r ^ 0 * h | f °;“ a £ e rmal 
responsibility for the development and ^“^ation^ elemen t of 
control system (TCS) f^^pace Station , ain te„ance of a TCS 

this responsibility is the the aaencv. The Thermal Test Bed 
demonstration focal point for the „ ^ *fi nition stage of the 

(TTB) provides this focus. artificial Intelligence (AI) provided 
TTB, it was recognized that Al fti performance enhancements for 

potential advantages and .^f^the Spa ce Station. The inclusion 
the TCS control system wlt ^^^J s S ^ e fore! has been an 
of Expert System (E/S) controll , to enable the proper 

important element of TT ®P^J n ^ 9 Realistic test environment, 
evaluation of this capability m a realistic te 

in March of 1966, the Office of Aeronautics and 

(OAST) -sponsored Systems Autonomy ^^^ate and evaluate an 
presented an opportunity ^ develop, integrate “f t e ^ u overall 
Expert System (E/S) controller^ CTSD believed Freedom 

goals and schedules of the f^and jihejp^ mutually 

ienekciSHorWng relationship with Ames Research Center 

Deve iopment h and° Simulation 6 Division 5 «££! 2 ?\~» established 
to pursue these goals. 

The resultant cooperative effort is lcn °^jJ ®| attempted to enhance 
system (TBXSYS, < J^tly . in place 

IPt^S? SPgeSer^ TEX SYS demonstrated the following 

features : 

I Control^ol normal ^^0^ Utar^p! setpoint 

- Some S incipient*^ failure prevention through trend 

- Faul Precognition , warning, diagnosis, and correction 
advice for ten component faults 

This document provides the ^^^P^B^esPInciosu^e 
subject test was deducted in the Thermal Test ^ m9 

(OperationaPTesting) 2 and° from 1 August 2 6 through September 1, 

1989 (Demonstration Testing) . 
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1 BACKGROUND 

RC enaineers worked with JSC engineers experienced in operation 
ofthe 9 Boeing Prototype Thermal Bus System lTBSI to understand^ 
the TBS operation. This knowledge was ^sedbyARC . bu 5 k 0 f 

knowledge base (model, tasks, and rules) for TEXSYS. The 23 
the k-owledqe engineering effort continued until February 23, 

1989. A review of the expert system software was then conducted 
at Johnson Space Center (JSC) . This review consisted of a paper 
check of the thermal rules, tasks, and model by EC to assure that 
the rules, tasks, and model contained correct information and 
were operationally correct. The delivery of TEXSYS on February 
23, 1989 initiated six weeks of TEXSYS/TEXSYS DataAcquisition^ 
System (TDAS) /preliminary Human Interface for the Therm - p 
System (HITEX) integration and validation testing. 

HITEX was delivered to JSC on April 16, 1989 and review of HITEX 
software began. Each stage of the software review was designed 
to insure the safest possible operation of the Boeing 
(BA) TBS. The next stage of the review process was 14 weeks of 
playback taped data testing. Using taped data obtained from the 
Boeing Aerospace Corporation (BAC) /Data Acquisition and Control 
System (DACS) TBS testing of October 1988, TEXSYS Nominal 
Operating Procedure (NOP) and Fault Detection, Isolation and 
Recovery (FDIR) routines were tested and improved m a manner 
SS? did not require the BA TBS hardware, but gave the software 
developers ready access to bus data. Software validation testing 
continued until the first week of July when wet bus operational 
testing began. Operational testing continued for 33 days. 

Initial testing required TEXSYS to obtain confirmation from the 
human operator before doing tasks, until at the end of the 
operational testing, TEXSYS was allowed to perform ali tasks on 
its own, except for venting non-condensible gas (NCG) and turning 
off the Rotary Fluid Management Device (RFMD) . Operational 
testing allowed time to debug the developmental software to the 
point that it was ready to demonstrate to top management during 
the demonstration week of August 28 to September 1, 1989. 

1 . 2 SUMMARY 

All of the major objectives of the TEXSYS Operational and 

Demonstration testing were successfully 

week of demonstration, TEXSYS performed nominal 

Drocedures of bus startup, setpoint decrease, setpoint increase, 

nominal shutdown , and emergency shut, ^on^ese lau^s^ere 
required faults and took appropriate action. These faults were. 

Slow Leak, RFMD Motor Failure, Single Evaporator Biockage,g 
Coolant Sink Temperature, Back Pressure Regulating Valve (BPRV) 
Failure , BPRV Ac?uator Failure, NCG Bu„ : dup, Excessive Heat Load 
on a Sinale Evaporator, Accumulator Position Sensor Failure, and 
Pressure Transducer Failure. The test series summary describing 
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these test series is included in Table 1.1. 

1.3 APPLICABLE DOCUMENTS 

The current versions of the following documents are applicable as 

references . 

1. Project Plan for Systems Autonomy Demonstration of Thermal 
Control System for Space Station; NASA, December 1987. 

2. Thermal Expert System (TEXSYS) Implementation Plan (TIP), 
STS-8 8-031 8 , CTSD-SS-2 66 , August, 1988. 

3. Boeing Aerospace (BA) Prototype Thermal Bus Test Article 
Description (TAD) Document, CTSD-SS-292, January 1989. 

4. Nominal Operating Procedure (NOP), STS-88-0322, CTSD-SS-294, 
January, 1989. 

5. Fault Detection, Isolation, and Recovery, STS-SS-0356, CTSD- 
SS-293, January, 1989. 

6. Boeing Aerospace Corporation/Data Acquisition and Control 
System (BAC/DACS) Stand-Alone Quick Look Report, STS-88-0348, 
CTSD-88-294, November, 1988. 

7. BAC/DACS Stand-Alone Test Final Report, STS-89-0095, CTSD-SS- 
310, February, 1989. 

8. BAC/Thermal Expert System (TEXSYS) Test Requirements 
Document, STS-89-0342, CTSD-SS-276, March, 1989. 

9. TEXSYS Test Plan Document, STS-89-0105, CTSD-SS-308, May, 
1989. 

10. TEXSYS Quick Look Report, STS-89-0127, CTSD-SS-335, 

September, 1989. 

11. TEXSYS Software Test and Integration Plan (STIP) , NASA/SDSD, 
February, 1989. 

12. "As Run" Space Station (SS) /BA/TEXSYS Demonstration Test 
Procedure, CTSD-SS-273, July 1989. 
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2.0 TEST SYSTEM DESCRIPTION 


teXSYS test system includes the following elements: 

o TEXSYS and Human Interface for TEXSYS (HITEX) , developed by 
ARC. 

o TEXSYS Data Acquisition System (TDAS) developed by EF 

o TTB Data Acquisition and Control System (DACS) developed by 
CTSD 

o Data Acquisition and Recording System (DARS) developed by CTSD 
o BATBS test article, developed by CTSD 

The TEXSYS demonstration hardware functional overview is 
presented in Figure 2.0.1. The TEXSYS demonstration hardware 
configuration is shown in Figure 2.0.2. The major software 
components, TEXSYS, HITEX, TDAS, and TTB DACS Flexible Control 
(FLEXCON) , and their functions are included in Figure 2.0 .j. 

The BATBS, shown in Figure 2.0.4, is a representative two-phase 
central thermal management system for the SSF. The BATBS has 
five heat acquisition components including a total of three 
evaporators electrically heated and two fluid heated evaporators. 
Heat rejection from the BATBS was accomplished primarily through 
the Gregorig-Grooved Twin Condenser (GGC) and the Shear Flow 
Control Condenser (SCC). The GGC and SCC were cooled utilizing a 
facility coolant cart which provided a heat sink simulating 
space radiators. The BATBS Test Article layout in the TTBTE and 
location of facility support carts and control panels for this 
ambient test are shown in Figure 2.0.5. 

Control of testing was executed from the Data Analysis Engineer 
(DAE) Room shown in Figure 2.0.6. The BATBS was operated through 
the DACS controllers located outside the TTBTE linked through 
DECNET to the system level DACS MicroVAX 3600 computer and the 
TEXSYS and HITEX Symbolics computers. 

2.1 SOFTWARE AND COMPUTER HARDWARE DESCRIPTION 

The software modules comprising the TEXSYS Demonstration Project 
software and required computer hardware are described in the 
following sections. 

2.1.1 Software Functions 


2. 1.1.1 TEXSYS 

TEXSYS functions as the thermal reasoning software with the 
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Figure 2.0.2. TEXSYS Demonstration Hardware Configuration 
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Figure 2.0.4. Simplified Integrated System Schematic 
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capability for re ^'^ 0 "°f ^L^oniwring 1 £« FMR^ith* ^ 

relict tl the' current system operational mode and^for^fault 

prediction via trend detection an ana ^suqgests possible causes 
ofS the 

test article from reaching an unsafe or hazardous sta ^ e ' h ® n FDIR 
recommends a plan for fault-recovery. At each •„ 

sequence, TEXSYS provides a mechanism by^hich HITEX^e P^ 

S^tK^ test*article , identifying .substandard behavrcr^ 

Sss 

may be™ individually set by the operator to require operator 
confirmation or to allow autonomous action. 

texsys software can be thought of as a series of layers (see 
Figure T.IT.IU At the base is the Symbolics hardware, the 
Symbolics Common Lisp Environment Genera 7.2) ^a ^ 

Knowledge Engineering Environment (KEE 3.1). 9 aver . 

extensive multi-tasking, and message passing capabilities, a 
Mod^ Toll Kit (MTK) , which allows th e development ofjomple^ 

Tetllliln Sd S d?SimIc S |“lai mllilg o f Physical components and 

sss s 

implement the event cycl ® ' , d ®^^ b ®s^cts W of a TEXSYS) , the model, 
procedural control over a11 °* h ?* ?dir rules bus related 

procedural 1 tasks ^ ' S rules ^and 

representation of model components and printouts of rul 
'tasks are included in Appendix C. 

and inform the system °PS« tor °f main 

^oi h : IftSllmlf Iv^vbfch m^ -J^-d.^These actions 

fault" recovery I^Th^mai^TEXSYS cylle is illustrated in Figure 

2 . 1 . 1 . 1 . 2 . 
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''^request, system status 

(Query TDAS for interesting 
events since last update) 
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(Send a packet of Information 
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violations, component status, 
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UPDATE y<?nEL DATA 
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time.) 
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2. i.l. 2 Human Interface for Thermal Expert System (HITEX) 

a^historica^dat^collecte^and'archive^by the DAHS . ' It also 

makes available to the user schematic ^detail HITEX 

article and its components at various levels of detail, hi 
offers a facility by which the user issues iiiect 

commands. These capabilities are implemented through HITE to 

mrycyc 4 - 0 TDAS to DACS software. The operator has two sc 
control and monuor the E/S and the BATES. The graphics screen 
To l roior screen primarily for monitoring the state of the tbs. 
ihe E/S screen is a black and white screen used to control and 

monitor the E/S. Appendix A contains ° t coSfigSJa- 

expert system screen displays in several different configure 

tions. 

si3s:%sr. s-sk — 

format. The displays that are available are. 

Main Boeing Schematic 

Two-Phase Water Heat Exchanger (HX) Diagram 

Single-Phase Water HX Diagram 

Two-Phase Ammonia HX Diagram 

Cold Plate HX Diagram 

Cold Rail HX Diagram 

Twin Condenser Diagram 

Shear Flow Condenser Diagram 

Sensor Table 

Plot 

Status-at-a-Glance Diagram 
Global System Parameters 

Tn addition the operator can open and close isolation valves 

traces' of ^^ntrles ' iH^ritorconl igurable window 

fl?^? Provision! have been made for a P roced ^ 1 x ?J|2?fice 
iormay. nrovides the operator a command interlace 

Setup NCG Venting Parameters 
Initiate Setpoint Change 
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Close Valves 

Open Valves 

Turn On RFMD 

Turn Off RFMD 

Off Nominal Shutdown 

Check RFMD Voltage and Frequency 

Turn Off a Sensor 

Activate Sensor 

Nominal Shutdown 

Nominal Startup 

Vent NCGs from RFMD Once 


The underlying HITEX software may be thought of as a series 
layers, as shown in Figure 2. 1.1. 2.1. At the b J s ® J:!, ^ CorD KEE 
Symbolics Common Lisp Language (Genera 7.2), and Tool 

(3.1). A generic software tool developed by SADP, Schematic 
Kit ( STK) allows the development of complex schematics with 
dvnamic data display. Remaining software modules are: XTK, 

HITEX Tasks, ESS software, the Graphics Library, Schematic, and 
Runtime HITEX using color KEE pictures and dynamic windows. 


2. 1.1. 3 TEXSYS Data Acquisition System (TDAS) 

TDAS functions as the software interface between TEXSYS, HITEX, 
and DACS. TDAS is responsible for extracting both real-time and 
archived data from the DACS, filtering it as necessary, and 
structuring it into a format that can be used by TEXSYS and 
HITEX. It also translates any control related requests for 
commands issued by TEXSYS and HITEX into FLE ^°”^°^XC0N queue 
formats, and places this data into the a ?Pf°P^ abe d ^5^ent 
or database location. TDAS software resides on 3 * lf ;®£J ^ nr TTB 
computers. These machines are a MicroVAX, where the ™CS f or TTB 
also resides, and two Symbolics computers, where TEXSYS and hitex 
reside An ETHERNET with DECNET protocol is used for data 
communication between the MicroVAX and the Symbolica machrnea. 

An overview of the TDAS software is shown in Figure 2. 1.1. 3.1. 


2. 1.1. 4 DACS/FLEXCON 

DACS FLEXCON software functions as the primary data acquisition 
and control software for the TEXSYS test article. It provides 

the means by which data is collected from a beab “5 t !£ d 
a i eni aved for use by test personnel. Data is stored in the 

FLEXCON database and can be displayed e ^ h ®F rti cle*™ ° T 
nranhical schematics representative of the test article. 

FLEXCON has an event/alarm logger that r ® cor ^f xcON t provides S 
oDerator initiated changes ard any alarms. FLEXCON provides 
several features that are convenient in a test environment. 

Figure 2. 1.1. 4.1 presents a functional schematic of FLEXCON. 
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SOFTWARE FUNCTIONAL OVERVIEW 



fix -on also allows for control of test^artiole^through^both 

?irlyd?rSybla^ S ana preprogrammed control loops initiated by 
an operator . 

Automated -trol is^cbieve^tbrou^tbe -of -"CROs . 

operator^and touted -quentialiy which ^^^^Iments 
IS -n trofbSc^Trf described by screen text 
at each operation or decision point. 

2. 1.1. 5 Data Acquisition and Recording System (DARS) 

The main CTSL-DARS software functions i ” c i“ de ‘^th^data 

acquisition and display of e "j[ah e ®fi"9 | ' cTSL-DARS provides 

archival of engineering and I “Instri^nlallon' to tSsYS/DACS. 
mass data dumps of available instrumentation of the 

CTSL-DARS software can produce real time 

stored information. 

The DACS Data Services Facility (DDSF) fu " c *j°? s a ® 1 the <r u° ftWare 

^hrk'Vo. -ss'fftSSiS-ViA-W' 

every minute. 

DDSF also provides the capability t °° b ^ i JJ S g r selecte^intervals 
parameters on demand and automatically. at ®J ility for r eal- 

from DACS. A separate data to the CTSL-DARS computer, 

time plots by sending selected data to^the CTS^ ^ display 

Plot software on the CTSL DARS co P Hard codv output can be 

data on VT240 and VT340 type terminals, ^d copy outp^ 

obtained on CTSD’ s £»£»«£• "icS—d In CTSL-DARS. DDSF 
printers. After data has . i_i5 parameters for user 

provides software to rl ^ s 1^1^^ interface to 

selected time inter ^ a ^^ ^chived data plots. 

TDAS for gathering data for HITEX arcnivea u t' 

2.1.2 Computer Hardware 

hardware Elements 6 utilized*^!! 1 the ^EXSY^Demonstration . 

2. 1.2.1 TEXSYS Hardware 

TEXSYS hardw re » 

drive?° an Apple Ifsef pr^terfand a monochrome console. 
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2. 1.2. 2 HITEX Hardware 

HITEX hardware consists of a Symbolics 3650 with 24 MB of memory 
m 8-bit SS buffer, a 368 MB fixed disk, an external cartridge 
tape drive, a monochrome console, and a 19 inch high resolu ion 
color console, LGP-2 laser printer, DECNET support. 

2. 1.2. 3 Data Acquisition and Control System (DACS) Hardware 
Functional Description 

The DACS consists of a system level (DEC Mic ^°^ c 3 ^° r oVAX II' s B 
of memory) and two subsystem level pTOcessors (DEC M cr, dVAX II s 

Flight Bus CPU with 16 MB of memory and Flight Facility CPU 
4 MB of memory). Flight bus data is the data necessary for 
control of the test article. Flight facility data is 
informational data from the facility that is needed in a test. 

The DACS system level processor supports up to 
color/graphics CRTs and up to four printers. The Aydm CRTs 
display both static (graphics) and dynamic data concurrently 
allow operators to issue commands to the test article using the 
video generator /keyboard or the Carroll Technologies touch screen 
built on to all of the Aydin CRTs. The system processor drives 
up to six Aydin CRT's, the subsystem processor drives an Aydi 
CRT, one Remote Terminal Unit (RTU) and can drive one event 
logger (printer) as required. The current configuration does not 
have subsystem printers, as the system printer records events for 
both processors. 

The DACS RTU which interfaces with the test art j; c l? . “ c ^„ 

by Analogic and consists of two chassis. One chassis has 16 typ 
T thermocouple cards, with 64 thermocouple input channels. The 
other chassis has a total of 15 cards containing 8 ' 

32 -10 V to 10 V differential input channels, 16 -20 to /u 
differential input channels, 32 0-5 V Transistor to Transistor 
Logic (TTL) input channels, 64 TTL output channels, 
analog output channels and 12 0-10 V analog output channels. 

2. 1.2. 4 Data Acquisition and Recording System (DARS) Hardware 
and Software Functional Description 

The DARS is hosted on a Digital Equipment Corporation (DEC) VAX 
8650 computer. There is one DARS line printer for : harden opies of 

tabular data during test. Data acquisition for the DARS is 
accomplished using the NEFF 600 RTU supporting 512 channels of 
•irmut data The DARS records engineering data and can transr 
i? P channeU of DACS data to FLEXCON. The DARS system software is 
known as CTSL-DARS . 

The main CTSL-DARS software functions include the data 
acquisition and display of the engineering data, the archival of 
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the flight and engineering data, and real-time printouts of 
tabular data of the engineering information. 


The data archived by the CTSL-DARS data can be used to create 
post-test data plots and tables from both the facility instru- 
mentation and DACS data. 

2. 1.2. 5 Communication Hardware 

The communications hardware for the DACS/DARS network consists of 
a 500 meter ethernet backbone cable, tapped by DEC H4000 
transceivers. The backbone cable runs partially around Building 
i 2 Chambers A and B, through various areas of the nigh bay ana 
along the mezzanine area of Building 32 and into Building 33. 
Outside users can access the Building 32-33 Local Area Network 
through the CTSD 2 (Building 7 VAX) gateway. The data 
cor tiunicat ions are accomplished using the DECNET ethernet 
protocol . 

2.2 THERMAL SYSTEM DESCRIPTION 

The BATBS was built in support of SSF development under NASA/JSC 
contract NAS9-17478 and has been described in detail in the 
following documents: Boeing Prototype Ambient Test Requirements 

Document (TRD) (reference document CTSD-SS-200) ; Boeing Prototype 
Thermal Bus Test Article Description (TAD) (reference document 
CTSD-SS-292) ; Nominal Operating Procedure (NOP) for the Boeing 
Aerospace Corporation (BAC) Space Stati Prototype Two-Phase 
Thermal Bus System (TBS) (reference doc sent CTSD-SS-294 ) ; and 
Boeing Aerospace Corporation (BAC) Space Station Prototype Two- 
Phase Thermal Bus Fault Detection, Isolation and Recovery (FDIR) 
(reference document CTSD— SS— 293) . The following se. _ions provi e 
a description of the overall system functions and the modifica- 
tions to allow testing with the TTB, DACS, DARS, and TEXSYS 
performing selected control and data acquisition and storage 
functions . 

2.2.1 Integrated System Description 

The TBS is mounted on Two JSC provided pallets and has an overall 
envelope of approximately 7 feet wide by 20 feet long by 6 fee 
high. A simplified integrated system schematic is shown m 
Figure 2.0.4. A detailed schematic including the TBS and 
facility support equipment with instrumentation is depicted in 

Figure 2. 2. 1.1. 

The system thermal management approach consists of four primary 
fluid control elements: (1) the Rotary Fluid Management Device 

(RFMD) , (2) Back Pressure Regulating Valve (BPRV) , (3) the 

accumulator, and (4) the cavitating venturi. The functions and 
features of these components are summarized m Table 2 - 1 . 
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^!- 

Flowrate contro^is provided the cavitatin, venturxe . ^whrch 

are functionally analogous to a choked onnce m p 
system. 

srs^u v ;ns i «;tin,^j.t 

^a^lnS^^ tack to 

the^vaporator section 3 " vlpo? passes out of the^RFMD^through the 

rejL“nfhea? n ?rihe S C«i n : jttache^.t^the 

condenser which in ^ Condensate from the condenser 

refrigeration units of the TTB TE Cond^^ ated from the 

returns to the RFMDUine 4) inro ^ subcoo led liquid passes 
main chamber by a thermal barr * harrier and mixes in an 

throuqh peripheral holes in the thermal , , This 

intermediate chamber with liquid from the ““ f Chough 
relatively cold liquid mixturerspumpedby a pit enc ounters 

atomizers into the main chamber ™P“ s P a «l "“^ 2ea subcooled 

the “coming evaporator two-pha aensi some o£ the vapor, 

iwci rejoi™ the linular rotating liquid Thus the RFMD acts 
as a regenerator as well as the pump and phase separator. 

The details of the individual system modules are as follows. 

2 . 2 . 1 . 1 Pump Module Description 

The PUt'P fodulc tssembly^ consisting^of^the^RFMD^BPkV^dual 
accumulators, filters, and sy t /p p . and moU nted at the 

TSl“tt e itt a tittda^. in Tte tump module and instrument package is 
shown in Figure 2. 2.1. 1.1. 


2 . 2 . 1.2 Evaporator Description 


The five evaporators inc J u J® d h e” t t sources* in Table^C? These 
summarized with their actua interfaces for use on the Space 

KEXT Three^evaporators -« fe|igned as fluid to fluid 

interface HXs (although one is heated electrically 
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Module and Pump Module Instrument Package 







TABLE 2-2. 


SUMMARY OF HEAT ACQUISITION DEVICE MAXIMUM 
HEAT LOAD CAPABILITY 


Heat Acquisition Device 


Heating 


Maximum Design 
Heat Load 


Single-Phase Water HX 


Two-Phase Water HX 


Pumped single-phase 
water loop 

Electric strip 
heaters 


5 kW 


3 kW 


Two— Phase Ammonia HX 


Pumped single-phase 
refrigerant R-ll 


8 kW 


Cold Plate (Swirl Flow) 220 v. electric 

strip heater 


5 kW 


Cold Rail Evaporator 


220 v. electric 
strip heaters 


2 kW 
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current test) and tw ° ® v ||°t“t HXs. Each HX has an instrument 
representing mechanical c contains pressure transducers, a 

package adjacent to xtwhi. ch < contains p valve> and a 

cavitating venturi, lsola instrumentation packages permit data 
pressure relief valve The ^ s *™^ ance a £ d for post test 
for real-time monitoring P svstem components. Closing the 

performance correlation o liquid supply line of the HX, 

^^s l s?^n d =f £ou « ^a^a?^ * 

mentation^package^^used^ fo^al^three «uid heat exchangers. 

Both the cold plate and cold ^g^^io^valve located downstream 
instrumentation package. T directing the same total flow 

of the cavitating venturi is closed directing remaining coil to 
through the remaining coil theryf 9^ and cold rail HXs 

absorb the entire heat load. The P heaters. The heaters 

are electrically heated with 220 VAC mmv ^ are equipped 

are controlled by the ^ontr . \ 60 ° F to protect the HX from 

with thermostats and alarms set at 160 to p 

overheating . 

2. 2 .1.3 Condenser Description 

* K\i fyn tvoes of condensers# a shear 
Heat rejection is provided by . d y ^ Q interface with the LTV 
flow controlled condenser, d 9 and three Gregorig grooved 

twin S con den s e r de signed ^/^^^flo^conSSlled condenser and 

sres ^ aesi9nea to ai 

12.5 kW at 70°F (a total of 25.0 kW) . 

2.2.2 Thermal Test Article Layout 

Figure 2. 2. 2.1 shows the a planned test layout 

article (BAC TBS and DACS) , s a *e located inside the test 

enclosure ' an^U ^^^t^lP-t is locate, outside in 
the high bay area as shown on this fig 

The TEXSYS and HITEX Symbo * D ARS pr oce s s or S both reside in the 
DACS system processor and t BARS roce s SO rs have associated CRTs 

that^are llcT.lTl^llk roo^Eigure 2.2.2.2). 

‘P“ f ^ re 

2 . 0 . 6 ) . 
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VT 220 


VT 240 


VT 340 


AYDIN 


Symbolics 


Figure 2.2.2.2. DAE Room 
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2.2.3 Facility Support Hardware 


As shown in Figure 2. 2. 2.1, there are several pieces of facility 
support equipment and components required to support the TBS . 

The major units are as follows. 

2. 2. 3.1 Electrical Heater Description 

The cold plate and cold rail evaporators and two-phase water HX 
were heated electrically by Minco heaters applied to the surface 
of each evaporator or HX. The Variac heater control supplied a 
maximum of 2.1 kW to the cold plate, 2.0 kW to the cold rail and 

3.3 kW to the two-phase water heat exchanger. 

2. 2. 3. 2 Cart 6 /Cart 2 Description 

Facility heating cart C6 provided thermal load for the single- 
phase water HX. A maximum of 12.0 kW of heating was supplied by 
the aqueous ethylene glycol (80% water /20% by volume) circulating 
fluid. Facility cart C2 provided thermal load for the two-phase 
ammonia HX. The refrigerant R-ll circulating medium supplied a 
maximum of 8.0 kW of heating. 

Both facility carts were provided by JSC. Carts were controlled 
manually to change the thermal loads on the HXs. Flow, tempera- 
ture and pressure requirements are described in Table 2-4. 

2. 2. 3. 3 Cart 4 Description 

Heat rejection during the TEXSYS test was provided by a radiator 
simulator cart (Cart 4) utilizing a 50% water/50% ethylene glycol 
by volume solution. Typically Cart 4 provided a flowrate of 
approximately 10,000 lbs/hr at 11°F. The nominal heat rejection 
capacity of the cooling cart was rated at 25.0 kW at a thermal 
bus setpoint of 70°F. Refrigeration cart R2 provided the heat 
sink for Cart 4 . 
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3.0 TEST OBJECTIVES 

, a-his t est was to provide a comprehensive 

The primary goal of this t hardware/software 

performance demonstration including the BA thermal bus, 

elements being utilized 1 ility D ars. Ambient test 

TEXSYS, HITEX, ? a “’- S !;. SaC/SacI stand-alone ambient test 
series performed during the ^/DACS sta procedures were 

were repeated to demonstrate manual NOP. *uik p u on 

demonstrated for each s y s ^ m completion of manuk testing, 

satisfactory (as de f : ined , b Y EC2) com, piet: xo procedures. 

Specific test objectives are as follows. 

This test demonstrated llchnlquSs'^^e 1 '' 9 

pr imary^ob^ec t ives S for S the TEXSYS/Thermal Bus Test included 
operation of : 

o The TEXSYS/Thermal Bus physical interface via CTSD/DACS 

o HITEX data acquisition and display functions for the thermal 
bus 

O TEXSYS /HITEX communications protocol 

O TEXSYS /HITEX monitoring, control, FDIR, and advisory 

Thermal bus operator low level control functions available 
through TEXSYS/HITEX demonstrated in this test 

1) Pump on/off control 

2| Valve operation - isolation and control valves 
3) Activate /deactivate sensors 

Higher level control tasks utilizing the above basic functions 
were also available. These include. 

1) Startup 

2 ) Shutdown 

3) Setpoint change 70° - 35°F, 35° - 70 F 

4) Nominal operations, 70° and 35°F 

FDIR capabilities tested j-^^Thicf^tft'he ^rtfcuilf 
from the FDIR document and numbers w 

FDIR paragraph. 
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SYSTEM LEVEL FAULT 
2 , Erroneous instrumentation 


2 . RFMD power usage out of 
tolerance 

3. Evaporator loop flow out of 
tolerance 

4 . Inadequate subcooling 


5. Setpoint not stable/ 
tracking 


6 . Evaporator (s) temperature 

7. Fluid inventory out of 
tolerance 

A subset of these fault scenarios 
demonstration test, based upon E/ 
software testing with the ammonia 


COMPONENT LEVEL FAULT 

3.33 Accumulator position 
sensor failure 

3 # 35 Pressure transducer failure 
3.4 RFMD motor failed 

3.22 Single Evaporator blockage 

3.27 High coolant/ sink temperature 
3.11 BPRV failure 

3.10 Non-condensible gas (NCG) 
buildup 

3.11 BPRV failure 

3.i: BPRV actuator failure 

3.20 Excessive heat load on single 
evaporator 

3.30 Slow leak 

was chosen for the 
i performance during playback 
charged BATBS. 
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4.0 APPROACH 

This demonstration project was a joint f ?he betWeSn 

rpqearch and operational NASA Centers: ARC and JS . 

required AI technologies were developed and implemented y 
knowledge engineers and AI and human factors researchers at ARC, 
while relying upon the Thermal Control System (TCS) domain 
experts and knowledge and integration engineers tesidingat . 

The demonstration was conducted at JSC with the TCS hardware tes 
bed. The project approach involved a multidisciplina y 
integration of knowledge engineering, man/machine e 

systems architecture to enhance automation of a prototype Space 
Station TCS (Figure 4.0.1). 

Prior to beginning any of the testing, the TBS /hardware /software 
loop was checked out to determine that all the 9 

and to ensure the integrity of the test rig. Section ^ h( L r kout 
Test Plan Document (TPD) contains pretest functional checkout 

guidelines and procedures. 

Each test point series was designed to meet s P e cific test 
objectives. The nominal case test points were ^signed to 
provide information on the performance of the TEXSYS * /s * ™ and 
manually injected fault simulation provided performance data 
operational expertise for the automated FDIR procedures of 
TEXSYS . 

The BA prototype thermal bus system variable parameters are: (1) 

total evaporator heat load and load distribution, (2) the 
setpoint temperature, and (3) the condenser sink temperature. 

The single phase water HX was heated using facility Car * 

transferred heat to the two-phase anunonia evaporator supplied by 

facility Cart 2. The heat applied electrically to the 
plate cold rail, and two-phase water evaporators was supplied 
an^con trolled by the Variac Heater Control The condenser 
section cooling was provided by radiatorsimuiator Cart 4 usi g 
wster/ethvlene glycol as a coolant, providing 25.0 kW or cooling 
___- n 4a. v tbs loop setpoint temperature was changed by adjusting 
thlback ' pressure ?eguil?in, valve. The TBS setpoint temperature 
is the saturation temperature a the loop operating pressure. 
Figure 4.0.2 shows the vapor pressure curve for ammonia. 

The wet bus testing phase of the TEXSYS Project was divided into 
onerational testing and demonstration testing. The approach 
fo^operationa^testing to be a time of debugging and proving 
TEXSYS. Demonstration testing was then a time to show TEXS 
capabilities . 
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JSC TESTBED FREEDOM 

DEMONSTRATION 


Figure 4.0.1 . A Joint ARC/JSC Automation Technology Demonstration 
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all aspects of the TEXSYS demonstration project including: 

- Data acquisition, management, and transmissions 

- Thermal bus nominal control techniques 
Fault Detection, Isolation, and Recovery 


Operational testing provided the first in ‘*^ated checkout^ all 
primarily S on operations Finally^ 
?l?”Se°?o^! S d™ln«»”orto t ?o?!lw! If any changes were made 

the software changes. 


4 . 1 DEMONSTRATION TEST 

The formal TEXSYS Demonstration displayed the E/S monitoring, 
oontroHid advisory functions. As with the operational tests, 
all standard TTB test procedures were followed. Only tes y P°^ 
formally conducted during the operational tests were considered 
fo^the^Demonstration Telt. All NOP and FDIR ^ations^ere^ 
performed during the Demonstration Test week. . 

faults were selected for demonstration to management (based 

mainly on time constraints) . 


These specific faults selected were: 
SYSTEM LEVEL FAULT 


1 . 

Erroneous instruroentatio.* 

2 . 

RFMD power usage out 

of 


tolerance 


3. 

Evaporator loop flow 

out of 


tolerance 



COMPONENT LEVEL FAULT 

3.35 pressure transducer failure 

3.4 RFMD motor failed 

3.22 Single evaporator blockage 
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5 . 0 TEST OPERATIONS 

All TEXSYS test operations were conducted according to the Space 
Station Boeing/TEXSYS Thermal Bus Demonstration Test Procedure 
(CTSD-SS-273) . 

5.1 OPERATIONAL TESTING 

Following completion of leak checking of the TBS and dry 
functional checkout of the manual valve panel and the DACS 
control routines, ammonia servicing was initiated on July , 

1989 Two small leaks were repaired and ammonia servicing was 
completed the following day. The initial ammonia charge was 
approximate 1 v 89 lbs. HITEX/TDAS was used to monitor bus 
conditions during the servicing. The initial startup and we 
functional testing were performed using DACS control ro ^ t ^® s ; h 
Initially the panel mounted accumulator position sensor 
DACS accumulator position sensor were not in agreement «nd the^ 
DACS accumulator read full, indicating either a fa y nacs 

an excessive ammonia charge. TEXSYS was used tomonitorthe DACS 
wet functional operations. It indicated accumulator sensor 
failure" faults on BPS701 (low) and BPS702 (high), 
fluid inventory" (which was later to be determined as the cause 
of ihe high accumulator reading) , unstable setpoint temperature 
(due to real drift from the previous BAC/DACS test calibration) , 
and "evaporator loop flow out of tolerance fault (due to 
unrealistic setting of transition points in the rules j . 

wet functional testing was initiated on July 14 , 1989 
Alieva Ives we« opened and closed fro* the HITEX Expert System 
Screen (ESS) . Evaporator loop flow checks were performed o 
Single Phase Water and the Two Phase Water Heat Exchangers to set 
the 9 transition point values for the "Evaporator Loop Flow Out of 

Tolerance" and "Single Evaporator Blockage" . operator 

performed using TEXSYS (confirmation required from the operator 
innate “alks> with no observed problems. The following is a 
chronological summary of TEXSYS operational testing. 

julv 19, 1989: The TBS startup was performed by using JJXSYS^ 

Some valve open/close operations were checked out from the HITEX 
Graphics screen. The pressure transducer failure Test Series ' 
was P per formed. This series was repeated as TEXSYS was offline 
(due P to a flag setting problem) and was not receiving data from 
TDAS The "excessive heat load on single evaporator (Test 
Series 9) was performed. DARS computer (CTSD5 ) was down all 
afternoon, so no data recording was possible The "accnmalator 
position sensor failure" was recognized for high and low values 
for sensor BPS701 (Test Series 6). The "single evaporator 
blockage" (8B-closing BSV001) was diagnosed only after manual 
insertion of heat load data and a false assertion that the 
solenoid valve was open into the TEXSYS model. This au 
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Q ji The "RFMD motor 

later repeated closing MV0001 <^est Series ^EXSYS developed an 

failure" was not performed as fanned ^ f<mlt The 

performed^anually at the manual value panel. 

, T „lv 10. 1989 : The startup^ Perfusing -gg* — 

TEXSYS diagnosed the system 1 nrnr pfl ure There were DARS 

component level fault diagnosis procedure. ^ ^ The 

problems (with the' Data ase perfonned successfully (no data^ A 

recording^ °Testing was held until "^M^motor* failure" and was 
shut down 9 was accomplished ^^^ he It ^ OS ed BSV706 and shut off 
diagnosed successful yY after these operations were 

RFMD" approximately 2 minutes 
performed manually* 

„, lv 21 1,89: The startup with TEXSYS ^7^ ' 

The Y "lpRV Al lure" fault was performed^ the fault due 

"suspected BPRV failure u e two phase water heat exchanger was 
to problems in this task . , n(a rature to heat load ratios 

mapped to determine delta «”P«« tor blocka ge" fault rules. The 
(DT/W)” to fix the single f was performed at 13.5 kw 

"high sink/coolant tem g e ^ ^xSYS at 55°F. P An "inadequate 
(13B) and was diagnosed by TEXSYS at 5* » slow leak faul t (16A 
subcooling" fault was also indicated. ammonia with 

and°B) was attempted, venting a f *om 3 ? .32% to 11.33%. 
an accumulator position s ®^ s . TEXSYS. The historical delta 
The fault was not a nominal shutdown was 

^?7^d Wa u S sinrTEX r sYS n InI the systems wes deserviced for the 
Apollo public tour over the weekend. 

• i-o replace BTC402 and BDP702 
July 24, 1989: The work required to replace drive was al 

was accomplished. During this , that continued through the 

replaced^ Leak checking preliminary pressure decay 

evening shift. ?ise of P 550 Microns, 

check was passed with a rate or 

.Tnlv 25. 1989: The TBS pumpdown continued until Q f 

final pressure decay ch ® c ^- waS A P ^!xSYS startup was successful b 
rise. The TBS was serviced. A JEXSYb ■ a ^ shut down was 
TDAS bugs precluded °P er ati°na fixes were completed, a second 

accomplished . After TDAS sof ^ wa ^® flX The startup was smooth but 
TEXSYS TBS startup was accompli ® . ’ - The setpoint drifted up. 

system stability could notbeachieved. J* zer / and :empe rature 

isolation* valve W BMV 704 n wafi h inadvertently left closed after 


but 
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servicing . 


July 26, 1989: The system was started using TEXSYS and four 

attempts were required. During 70°F operations, the "single 
evaporator blockage" fault was triggered several times and TEXSYS 
cycled BSV701 (the wrong valve) open and closed. In the first 
instance, the valve power supply was at 12 volts so the valve was 
closed but TEXSYS was unable to reopen the valve. The DACS 
screen showed the valve as green (open) during this period but 
the printout on the logger indicated when the valve was opened 
and closed. Apparently at 12 volts, when a valve changes to 
closed, this will not be indicated by the DACS screen. The valve 
was closed approximately ten minutes. 

Heat loads were removed to allow overheated evaporators to cool 
and the valve power supply was set at 24 volts. TEXSYS 
retriggered the "single evaporator blockage" fault and closed the 
valve even though the confirmation level was set. A 
"prompt/acknowledge" was inserted into this task in the model. 

The transition points for the evaporator flow and the two phase 
water heat exchanger delta temperature /heat load ratio still 
needed to be adjusted upward. TEXSYS performed a 70° to 35 F 
setpoint reconfiguration. It again skipped the "heat load 
turndown" and the "let accumulators settle" tasks which are 
supposed to be performed before the BPRV moves. This problem was 
supposedly fixed the week of July 17, 1989. TEXSYS was taken 
down and the set point reconfiguration completed using DACS. The 
system was shutdown manually using DACS. It appeared that the 
"system build" (software save) done over the weekend did not 
include all of last week's (week of July 17, 1989) patches to 
TEXSYS and that the model was left in an inconsistent state. 

July 27, 1989: TEXSYS started up the system on the second 

attempt. Setpoint changes from 70° to 60°F and 60 to 70 F were 
performed to checkout the fixes made to the set point increase 
task (making sure TEXSYS has evaporator loads shut off and that 
the accumulators settle out before adjusting the BPRV) . It 
seemed to work. The two phase water heat exchanger was mapped at 
three heat loads to obtain steady state and transient DT/W ratio 
information. This information was for the rules for "single 
evaporator blockage". The "evaporator flow loop out of 
tolerance" transition points were adjusted and TEXSYS ran for 
about an hour under steady state conditions with no faults 
triggered. TEXSYS performed shutdown. The GSS was down (TDAS 
link to HITEX down) , but the ESS still received information and 
performed functions adequately. 

July 28, 1989: A TBS startup was performed smoothly using 

TEXSYS. Errors occurred after startup: a second setpoint change 

(unstable setpoint fault???) and request to close BSV701 ("single 
evaporator blockage" fault) were vetoed. A warning occurred that 
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the RFMD monitor task was v t dip blem (TDAS was running out 

This appeared to be a ”®^° r ^ r< ; ces s i nq) . Variable heat loads 
of buffer space for network Processing, ^ get point decreased 

were performed at 70 F at , ' point hung about 38.6 F 

from 70° to 35°F using TEXSYS. The^set^po ^ „ vent NC GS from 

with accumulators full at *• times (via HITEX) to try to 

RFMD once- routine was performed four trmes,^ ^ ^ Heat 

decrease accumulator Y olu ™®: . . rapidly for a 35°F setpoint, 

loads on Cart 6 were increased trP 6 5^F and minimum flow when 

This Cart should be brought °n-line h eat loads at 13.0 kW 

at 35°F setpoint temperature. Variable heawo ^ load or 

( 5F) and 5.3 kW (5D) P did nS/ trigger because the transition 

evaporator blockage faults did not || ned in the TEX SYS model. 

points on trends were not * 70°F Y bv TEXSYS. It required two 

attempts^conf irmation 1 " levels were not^set so^the^tash was ^ 

^ ^ set 

performed at 5.0 kW per deviation (low and hig h due 

failure” and "fluid inventory out of ' ssure sensor 

to voltage spikes) fault.’ m indicated on the TEXSYS 

monitor" HITEX^an^TDAS lints died. The system was shutdown 
manually . 

July 31, 1989 = A TBS startup was ?ailSr™ X £auit was 

restart of FLEXCON was req attempt TEXSYS thought the system 

performed twice. During first ?. w ^ s corrected and the fault 
was in setpoint change failure « wa s indicated but the BPRV 

retried. The "suspected BPRV £ nti i it waS forced by 

failure confirmation task blem in the "confirmation" or 
the TEXSYS operator. A problem in status in the 

••succeeding" of tasks ® x ^® d ; wa i£tng" to "running" on HITEX. 

ESS. TEMP. KB was changed from performed. The com- 

The "excessive evaporator hea fault was terminated 

ponent level fault was recognized ^t the^ault^ ^ exchanger 

before the system level . fault _^ ® t le ? 9 temperature of 76°F (the 
was loaded to 10.0 kW giving an outlet temperat tl 

rated design of the heat exchanger an outlet 

implemented the system le f £ rule nee ded to be adjusted, 
temperature of 81 F to tire a HITE x DNA network 

This fault scenario was inte P f lt was performed. A 
problem. A "BPRV act, J a ^ r S fSSit was performed and interrupted 

by r f our r computer 11 link down problems of -^tSf ^.2 ^ 
required S opproximately a 10 ^minutesaEopposed to the nominal 
shutdown which required 30-45 minutes. 
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. , 1 QRQ. The Startup using TEXSYS required 3 attempts (a 
August 2, 1989. The startup . * tl set on first attempt; 

manual RFMD pane * k tasks) died during second attempt). 

"Pressure^ransduce^failure^was^er formed, during which 

retried^ ^e^evlpiratof dockage" fault was attempted twice . 

TEXSYS announced the "evaporator 1°°P ^"teXSYS did not come up 
system level fault on the first attempt - TEXSYS 

with the component level fault at all. “^ rature and as 

temperature on evaporator surfac rose P DT/W ratios 

the surface temperature rose, the inlet also^rose. ^ week 

were not quite high enough to t 99 . - e rinq frequently and 

{week of July 24 1989) this fault ^.^gering^freq 

DT/W ratio was too low. The fault log value change 

In trying to change a valve state from the ESS, tne r ^ point 

task hung in a . 1 °°P ^“^fop * a s' attempted. TEXSYS concluded the 

~ ^ fiw.,:r w -ss.nr.s ... 
ssurssu s\srs^s i.s.n.set s.-s—" 

S Model Monitor (a core level TE ProcessK T ^ e J“ S ^ a ched 

operator reset .^etosetgointdecrease. . ^he TE ^y.^ ^ 

increasing^heat* load 6 failed U decrees! the setpoint temperature. 

A check downstairs found the module 

side of the pump module. , The . a ™'°" aa = aaa r t “ P 7 0°F with 

TEXSYS^did^not 

a 1 

Shutdown used the TEXSYS off-nominal procedure. 

August 3, 1989 = The startup " aaa ^«J^ U i e “l™ob?eS? £T5 hA 
attempt. pTSblems or f^do™ biMuse ^slow TEXSYS 

ii^ergair S liw a sperd 6 anr^afing flow information even though 

the system was recovering) . * setpoint ^fs^tem LSe back to 

initiated separately during startup and * J performed. It 

startup. Setpoint change to 35 F using TEXsp P vented 

required about 1 hour 45 minutes to 9 et to 31 5^^ heat exchan . 
twice. "Excessive heat load on Haa J 5 i oa^peaked at lOkw. Set- 
point W was^changed P to^70^F S ^TEXSYS^asked^heat^loads ho^he removed 
down^was " per formed"^ ing S of f -nominal shutdown procedure on TEXSYS. 

August 4, 1989 : A smooth startup was; Pll^^^iiSlrporated (to 

Two changes to the text of the activating the RFMD from the 

turn on the RFMD panel s Y ltch „ b ® /valve switches ) . The "BPRV 
computer, and deleting closing manual valve switcnes, 
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failure” fault was ind«cad TEX V ,ave u ta e «tp 

ftSu Ind -BPRV failure” J^aS ^formed and three 

change to 35°F NCG ££ U Snd-to-end delta pressure 

injections of helium were required^ ^ TEXSY s diagnosed 

(BDP703) to drop from 6. P 7 s ^ d The operator allowed 

excessive NCG” at approximately 2 -7 psid^ ^ 22 TEX SYS) . 

venting 24-2 second bu “ b ® W ~ n 10 seC onds and nine vents on 
The valve open time was (TEXSYS had gone down during this 
DACS and 3 vents on JEX e ff e ct. The Ammonia Technician 

fault) were tried without a *y ®“® . The T est Manager 

“nted 0.4 lbs. of f ° e cov«ing end to end delta 

decided to raise setpoint SOTie NC G in the system. Cart 

pressure. There probab Y "single evaporator blockage. 

6 was brought on-line set up for sing ^ water 

Sevral excessive heat load /dockage fault (SB) was 

exchanger triggered (at 7.0 8.0 * * tivated so TEXSYS would not 

tried by closing BSV001 TEXSYS did not recognize the 

aet updates of that parameter. TEXSYb ° 4 to le i gpm (0.9 gpm 

laul^as the flow on B E M7 0 1 dropped^ ^01^1 • transducer" fault 
was required to trigger fau '• . system was reset and 

again had a HITEX/TEXSYS *^; tr ^ n ta“on) faults 

component and system | e tto « eV aDorator temperatures not 
triaqered. A system level evaporator teifc' at 97 degree outlet 

stable /tracking" did "f “^““^Nominal shutdown used TEXSYS. 
and 12.6 kW on the heat exchanger, womm 

august 7. 1989: Discrepancy Report s ?£ r tup? S Jumpers 

sensor aid valve j ndica ^°" diqi til card Replaced. TEXSYS was 
were installed and a ^ a J-°9 | close task was set to confirmable 

used to perform startup. £alve close ' los ing valves in response 

during startup to P rev ®£* *f X f a ;L been done from DACS before 
to bearing flow dips. These T K e between the manual 

TEXSYS ever sees dip ^hearing o ^ operator (panel-DACS 

panel gages and the ”> e “ a |!| “ has been too long for 

subsystem-DACS system TDA HITEX printer went down. 

TEXSYS to respond in jtimeiyma . fQrmed and triggered 

Accumulator posxtxon sensor fault P inventory faults (due to 

component fault “ e “v^eft ^toad on evaporator” fault «as 

per forme^and the o^onent fault^iagnosed. ^Syste with single 

^evaporator not stabl a/trachrng, was "ot^trrgg^ ^ Nominal 
phase water HX at 13.0 KW iwijn 
shutdown was performed via TEXSYS. 

August 8 . 1989 : DARS « c °5?* n 9 „ing r TEXSYsl n? BSV700 was 

startup attempt. Sbart l}g X s 5 i slowed because of checking mod ®J: 
adjusted via DACS when failure" fault was performed. HITEX 

state. "Pressure transdu* cer f -BPRV fai i U re" fault was 

link down occurred d ^^ ead BP r V failure but was unable to 
performed. TEXSYS d | e reaS on r two diagnosis 

identify the type of failure. 
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tasks were spawned and ran simultaneously. "High coolant sink 
fault wa^ induced and "high sink temperature" diagnosed at 57°F 
Subcooling was 10°F and it was decided to recover from fault then 
rather than wait until "insufficient subcooling" fault was also 
CiSaered Ut 8°F subcooling) . "BPRV actuator failure" fault was 
induced at 5.2 kW load and 30°F sink temperature and successfully 
diagnosed "RFMD failure" fault was induced. TEXSYS required 1 
minute 45 seconds from RFMD shutoff to close BSV706. Shutdown 
was completed manually. 

Auaust 9, 1989: Startup was performed smoothly ^^^fYS 

without confirmations on valve tasks. Pressure transd’ Minutes 
fault and "RFMD failure" fault were performed. About 2 minutes 
from RFMD shutdown was required to close BSV706 ^^^ y gp RV 
bus was restarted manually from HITEX. During attempted BPRV 
fSurl. thSt; dropped only to 66°F and stabil e with coolrng 
at 18°F. TEXSYS registered 'setpoint not stable/trac g 
TDAS died and took TEXSYS off-line with inconsistent baseline 

worlds. The TEXSYS operator adjusted tra ^ s ^^P°^xsYS down 
"Evaporator not stable/tracking" rules and brought TEXSYS down 
while setting up for faults. It had both startup and steady- 
state as system modes. Single phase water HX was heated up to 
12.0 kW and neither of the above faults triggered. Rules need 
to be adjusted on these faults. RFMD motor fa ^^ e Q |^ 1 ^il 
conf irmables off - required two minutes from J25 Y 2 f JL d long 
BSV706 closed. During off - nominal shutdown TEXSYS h g 

cycles (1 1/2 to 2 minutes) between messages to operator 
off various heaters. 

August 10. 1989: Startup was performed using TEXSYS. BSV706 

closed late a n d caused blaring flow to dip. It took two nrnut.s 
to send a message between TEXSYS and HITEX at the point in the 
procedure where it tells operator to put heat load on system. 

BPRV failure fault was attempted twice. TEXSYS indl raxSYS 
"suspected BPRV failure" but did not confirm failure. TEXSYS 
cycle times were so long that it was unable to see the poten 
tiometer move when it commanded a setpoint change during 
diagnosis process. On the second attempt it diagnosed a BPR 
actuator failure. During setup for the demonstration, a P owe £ 
outage caused the bus, DARS NEFF, and bus subsystem computer to 
go down The wrong breaker was thrown when maintenance personnel 
Sere shutting down some fans. The breaker was ta 99 ed do not ___ 
operate". The system was restarted with TEXSYS, but had to ope 
rinqp BSV701 a couple of times with DACS. Single evaporator 
dockage fac ias adempted by closing BSV001. TEXSYS did not 
pick up fault. The new transition points entered (August , 

1989) did not get saved out. BPR001 pressure readings vs applied 
vnltaoe were taken to see when TEXSYS recognized pressure 
transduced failure (at 1.25v and 63.5 psia) . TEXSYS shutdown the 
bus using off-nominal shutdown. 
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i qqq . TEXSYS startup experienced one inappropriate 
August Ilf l|ji* ( TE xsYS bogged down thinking) . BPRV failure 
closing of BSV701 ' TEXb " n D °” r „ n leak on R2 caused freon/NH3 

fault was in P^ gre ^ e W ^ve panel ias killed and shutdown the 
alarms to go off. The v P the er SU pply amps limit 

bus. This problem was believea « £ 0 wer outage. The bus 

not being resot to 3 “g* -SSs was being reset. BPRV 

was restarted using DACS while TEXSYS was^oei ^ . g thQught that 

failure was attempted tJJJ;®® d BPRV "slip" to be undefined 

not doing startup with TEXSYS ca ^ e d BPR^^slip f to^ ^ ^ 

with updates on BP *^ p ° Slt ^ X s YS performed 70 to 35°F setpoint 
seen. This n approximately 45 minutes. Several 

change and reached 35 F in PP flat soots in downward 

"NCG buildup" faults indicated due to flat spots^ ^ 

trend of setpoint temperat^ c ur f ace temperatures were high on 
blockage" faults indicated. S {J“ . . f ? At 35 o F the end-to- 

heat exchanger but it was noi flocked t wi 2 second 

end delta pressure^ ^ rfmD once" routine) . Setpoint 

was^reconfigured^rom 35. to 70°F using TEJSVS routine = which 

5SS S?S2 £ Seconds?. OhCS 

manual shutdown was performed. 

August 1 4 1 component 5 f ault S triggered after 

Dur .ng an attempted BPF ranure niaht after MV0711 

automaticlowbearing^f ~ ow^rel^'^shutdown. ^Right^after^^^ 

completely up as during a setpoint ^ange . The ^ shutdown^ # ^ 

diagnosis was that a * 5* %o 0 P kW up to 19.0 P kW and down to 4.0 
heat slug on Cart 6 from 10 .0 kw up ro ^ delta pressure 

kw. Approximately 5 minutes , .. svstem shutdown. 

spiked and then bear thereat load was kept constant at 
During the original DACS test heat loads on systems). 

5.0 kw during this fault (only electrical heat^loaas ^ X pRV 

We s : juld duplicate those c ®a ar ted using TEXSYS, raggedly 

failure fault. The system_ was: re x (DACS and T exsYS both) 

with opening and closing j__ ooed to 340 HZ to provide more 
Tlxl« r IdjuiteI n se?point TDAS died .^e^ault was^not.^g, 

indicated" bu^th^TEXSYS-HITEX relay died as TEXSYS was about to 

-SSS.SS 

loop flow BFM701 dropped to . DQrator surface temperature 

trigger a low t low alarm) as the ^IxSYS diagnosed a 

BTC005 reached 140 F (high 1x1111 was shutdown 

"single evaporator blockage emergency . The bus was s 
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using the nominal TEXSYS shutdown procedure. 

August 15, 1989: Two aborted startups were experienced. During 

the first startup, the DACS bus subsystem computer died from a 
software glitch. The second was from "initloop" being run while 
the bus was running (it shuts off RFMD) . The BPRV failure was 
attempted twice. TEXSYS "suspected BPRV failure". During 
processing "confirm BPRV failure" task, TEXSYS correctly 
attempted to adjust setpoint and asked operator to vary coolant 
sink temperature. It may have missed the setpoint tracking the 
coolant temperature because of a 10 minute wait in the task. 

TEXSYS operator terminated the task. On the second attempt at 
BPRV failure, TEXSYS "suspected the BPRV failure" and adjusted 
the setpoint. The TEXSYS operator terminated the confinn BPRV 
failure as TEXSYS cycle times were 5-6 minutes long. Single 
evaporator blockage fault was attempted. TEXSYS indicated 
"evaporator loop flow out of tolerance" (system level) and 
"single evaporator blockage warning". The fault terminated 
manually when evaporator surface temperature BTC005 reached 140 F 
high limit. Pressure transducer fault was performed. TEXSYS 
indicated a pressure transducer fault and "erroneous instrumen- 
tation" (system) fault within 2 minutes. The RFMD motor failure 
was used as shutdown with the time between "RFMD off" and closing 
BSV706 only 45 seconds. 

Auqust 16, 1989: During startup TEXSYS did not open BSV700, 

BSV701, and BSV706 (these operations were performed through 
DACS) . TDAS and TEXSYS parameters were adjusted manually during 
setpoint change to 70°F. TEXSYS falsely indicated "BPRV actuator 
failure". A high coolant/sink temperature "fault" was performed. 
TEXSYS recognized the fault at 55°F. TEXSYS garbage collection 
was performed. BPRV failure was attempted twice. During both 
attempts, TEXSYS did "suspected BPRV failure" task and initiated 
the "confirm BPRV failure" task. It adjusted the setpoint to 
80°F and requested that the coolant temperature be raised 10 F. 

In the first instance, the TEXSYS model locked. The second 
attempt was terminated due to NH 3 technicians going off shift. 
Demonstration practice - pressure transducer failure (7 minutes), 
BPRV actuator failure (6 minutes) , and RFMD motor failure (2 
minutes from RFMD off to closing BSV706) - were all successful. 
(Times do not include transition times between faults). 

Sequencing through heater shutdown took too long for observers to 
want to watch (8 additional minutes) • 

August 17, 1989: TEXSYS startup was sluggish. It commanded 

BSV706 and BSV701 to open twice. There was a delay in opening 
BSV700 . TEXSYS was slow in requesting heat loads as well as in 
processing setpoint change to 70°F. "Excessive heat load fault 
was done on single phase H20 HX. Demonstration faults were 
practiced: Pressure transducer fault, BPRV actuator failure 

fault, and RFMD motor failure fault. Restart with TEXSYS was 
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. "cinale evaporator blockage 

"ESStpbv 

r^ l £ 

setpoint change TEXSYS indicated BPRV actuator movement 

bothS and down (spurious) . TEXSVS c ^ monstration practice was 
and concluded tasks JJ? . on H ITEX set up ahead of time, 
repeated again with P re quired three minutes an ^ ® 

Pressure transducer fault .3 _i ml t es RFMD motor failure w 
actuator failure required •« DA cS was used to close 

. 0 slow with confirmations lef Time from RFMD off to 

BSV706 minutes^fter^^hut off.^^^ then operat or shut 

offhlaf'lotds’and completed shutdown. 

< S15, I S 1 i5^S SSiTiSSffysf- to 

work properly^ scrambling TEXSYS but it was decid 

startup «s with an old 'f« slo ;° f g ^a TEXSYS startup was very 
shutdown for system a 2? cg SI sped up operations and 

Sooth. Burying task tree ^aphics^ ^ BPS702 was at 2% 

made data transfer faster. BPRV failure was attempt 

, a .. a i. e d within time out perioa w*. TP y S vs was taken down, 

reinitialised'mode^and -e-eBtablished^^^ingl^ P, 

blockage" performed success Y. . fault was recognized. 

Evaporator blockage (component decrease, and 

TEXSYS toggled BSV001, saw the temperate Demonstration 

concluded the fault was due to a sticking actoator failure, and 
faults-. P res fa n ar “°e« U performed in 16 minutes total time. 

EEMD motor failure ^ ragged . valves opened 

august 21. 1981 ? Star ^ U w v W TEXSYS to achieve stabillt X* - d a 
and closed manually and y ^ ^ start (wanted t 

Accumulator P-^^'^^r^ic^ pUssure transducer failure, 
some ammonia) . Tne won * 
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BPRV actuator failure, and RFMD failure and repeated pressure 
transduced failure and RFMD failure for w. Guy. Restarts usrn g 
TEXSYS were smooth. "BPRV failure" fault was unsuccessful. 

"Single evaporator blockage" fault (closing BSV001) recovery 
performed successfully by TEXSYS. Shutdown using RFMD motor 
failure fault. 

Auaust 22, 1989: TEXSYS performed startup. "Single evaporator 

blockage" fault by closing BSV001 was attempted tw J- ce - 
successfully recovered from fault on second attempt. When 
attempting BPRV failure, TEXSYS did not conclude confirm BPRV 
failure" task. Successfully repeated was single evaporator 
blockage. Demonstration faults: pressure transducer failure, 

single evaporator blockage, and RFMD failure faults were 
practiced. System was restarted using TEXSYS but had to clos 
BSV701 twice through DACS. Pressure transducer failure , single 
evaporator blockage (three times) , and RFMD failure were 
practiced. 

August 23, 1989: Two demonstration practice sessions were 

performed: pressure transducer failure, single evaporator 
blockage, and RFMD failure faults. The bus would not start for 
demonstration after several attempts because of low bearing flow 
and insufficient ammonia inventory. It was charged with 15 lbs 
ammonia. The RFMD was started manually. It was very sluggis , 
with a high power draw. TBS was brought up very slowly, 
increasing frequency on Pacific power supply. The "excessive 
heat load" fault was performed. The component fault trigger e 
early on. The system fault triggered only by requesting TO 
update (deadbands too wide) at 24.0 kW on bus and single ph 
water and two phase ammonia heat exchanger outlet temperature 
77°F. A nominal shutdown was performed with TEXSYS. 

August 24, 1989: The TEXSYS startup was smooth. The "BPRV 

failure" had five unsuccessful attempts. The sixth attempt w 
successful . TEXSYS confirmed that the BPRV had failed open. The 
"excessive heat load" fault resulted in component and system 
l“el faults successful with heat load at 23 5 RW single phase 
water outlet temperature at 77.2°F and heat load 
two phase ammonia outlet temperature at 76.3 “ d J*?** J° aa 
kw. The BPRV failure was repeated twice unsuccessfully. TD 
link went down so the TBS was shutdown manually. An added 8.2 
tbs a^onia to the bus for slow leak fault. The slow leak was to 
be no more than 18 lbs. The bus should not be restarted withou 
replacing ammonia vented during slow leak fault. 

Auaust 25, 1989: The TEXSYS startup was sluggish. Jhe^slow^leak 

was performed (vented 17 lbs) but was not ^y T £ XSYS. 

The bus was serviced with 20.3 lbs ammonia. Slow leak was 
performed again, venting 12.8 lbs. “Slow leak- (component) and 
"fluid inventory out of tolerance" (system) faults were 
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successfully a 13 ^" 0583 ^/|pKv S fail«e"? P ”confim r BPRv a failure" 
attempted. The "suspected . B ™I k : a fI«a TEXSYS was not able to 

$2“ 3 B^Ia^i Manual shutdown was 

performed . 

5.2 DEMONSTRATION TESTING 

August 28, 1989:. Dem ° ns « at ^° n b “ s ^ 0 ® C beariirtlow a " a “ 8 ® 3 an 
automatic 3 shutdown^ The^s was 5-line 

SS l 2U5K transi tion^point U active-value * updating problems. 

The "high coolant/sink temperature" fault tj“ 

13) was performed and the component level fault ^was^diag^ ^ 

TEXSYS . While attempting to induce t y lost During 

subcooling" fault setpoint control of the bus was lost. Du J 

this time TEXSYS indicated a number .of faults^ t ^° e „ ture , . 
"sutpected r BPRV C failure" ^^^^^^faul^due t^hig^tempera- 

temperatures". When the setpoint exceeded TEXSYS qu 

an emergency shutdown. »hi=h was vetoed by^the^pe: C fa ult on 
RFMD power draw triggered a was°t>er formed, for which 

TEXSYS ' generated 1 " lo^power 

aUowel W tf “o; 5 d^ran2"IxS?I was taken off line for dynamic 
garbage collection. 

RFMD speed sens ° r f 3 ^ 70 ^ i°or y was d put X in d the 9 circuit and 

the RFMD was off-line. * 5^? x ^* tinue a to show intermittent 
the sicnal damped down. TEXF *S marked the sensor as 

high r J.kes throughout the day. * * k which required the 

abnormal in the model upon observing to 

TEXSYS operator to periodically reset tne 

nominal . 

The system was restarted using f ^e ^tpoint^e^rature 

was still very high (85 F ^‘ h y low flow relay triggered an 

to request a lower ^^loads'were removed. Resetting the panel 

sssnLfWJS 

^SV70?: P ^V70^ b!v? 06 ° ^openeS nd =x 

establish flow. A ten "end-to-end delta 

pressuret^Sy stem* hea^load 3 ^^* increased to 5.0 kW and the 

system allowed to stabilize. 
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"Pressure transducer failure" (Test Series 7) and "accumulator 
position sensor failure" (Test Series 6) faults were induced at 
70°F setpoint temperature and 5.0 kW system heat load. The 
component level and "erroneous instrumentation" system level 
faults were correctly indicated by TEXSYS. Variable heat loads 
at 70°F at 5.0 kW (Test Point 5A) and 10.0 kW (Test Point 5B) 
were recorded. "Single evaporator blockage" fault was induced 
twice at the two-phase water heat exchanger by closing BSV001 
(Test Series 8B) . The first instance gave all expected fault 
messages ("evaporator loop flow out of tolerance" and "single 
evaporator blockage" fault) but did not toggle valve BSV001. The 
second repetition of the fault triggered the "evaporator loop 
flow out of tolerance" and "single evaporator blockage emergency" 
(a more severe level of the fault which directs the operator to 
remove heat loads but bypasses toggling the valve BSV001) faults. 
An "off-nominal" shutdown (Test Series 16) was used to terminate 
testing for the day. 

August 29, 1989; The initial system startup using TEXSYS was 
terminated when all valves closed because Twin Condenser 
isolation valve (BSV502) had an excessive current draw. The 
solenoid valve power supply was disconnected, leaving BSV502 
failed in the closed position. Condenser capacity was then 
limited to approximately 12.0 kW with all heat load removal 
shifted to the Shear Flow Condenser. 

The bus was started up using TEXSYS. The system setpoint 
(BTC704 ) was decreased from 77°F to 70°F using "quick" setpoint 
change routine. A "single evaporator blockage" fault was induced 
by closing BSV001. TEXSYS indicated the system level "evaporator 
loop flow out of tolerance" fault and the component level "single 
evaporator blockage" fault. TEXSYS toggled open BSV001, 
recovering from the fault successfully. A "slow leak" fault was 
incorrectly triggered during the "single evaporator blockage" 
simulation. Accumulator bellows casing temperature decrease lags 
setpoint temperature decrease and can falsely trigger a "slow 
leak" when the accumulator moves to its steady-state position as 
vapor bubbles in the accumulator collapse. 

"BPRV actuator failure" fault was performed and diagnosed by 
TEXSYS. TEXSYS was put into standby to continue repairs to 
active value propagation software (begun August 28, 1989) . A 
70°F to 35°F setpoint reconfiguration was initiated using the 
TEXSYS nominal procedure. During the setpoint change, TEXSYS 
indicated "power draw out of tolerance", "excessive NCG buildup", 
and "high sink temperature" faults. "Evaporator temperatures not 
stable/tracking", "excessive NCG buildup", "high sink tempera- 
tures", "suspected BPRV failure" and "single evaporator blockage 
on the coldplate" faults were issued after 35°F setpoint Q 

temperature was reached. Stability was not maintainable at 35 F 
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- end-to-end delta^pressure remained^low^and^the ^ the 

temperature drif ^® d £^"t 4 was decreased to -10 F. 

twin condensers and Cart During 

. * „ 7=;°F to 70°F was initiated. y 

Setpoint reconfiguration fr leak (dripping on the floor) 

the setpoint change, an anun , emergency manual 

developed at the liquid tQ 10 psig 

shutdown wa | h | e ^°S e glass gland nut was tightened, and 
pressure. Tne s g of ammonia. 

:irriu 

manual^shutdown^was^etformed^due^to^low ^ring sensor BPS702 

-^ofia^frued Condensers and^apor Ji£ ^ 

reaa * Th RFMD was restarted cnr „;_ ate iy 18 lbs. 

reduced frequency toprovide-repow^r^ ^--^.Luhours 

during startup resulted in tne yy than true faults). These 
(conditions due to the startuprather^tn ^ „ evaporator loop 
included: "power draw out of tole 1#nt temperature fault 

“s W d 0 ecL 0 red t0 fo e r rl thrtwin A co^dLsers (off-line due to failed 
valve BSV502) 


valve savoui, the ^xsys 

The setpoint was adjusted downwardJ^O F S £ault aa 

"ouick" setpoint change routine. An ^ en(J . to . ena delta 

ES"=SS STi'SMSg t gition from a high level 
following setpoint decrease " ^ o „ the 

"Excessive heat load on s3 - n £ le raising the Cart 6 

single Ph»» a «*«g F hea ^ C c|m|onent level fault and the system 
temperature to 92 F. Tnis 1 1 ~ stable/ tracking were 

SSr^TiStfS.?' ««»' Iffe^StoT “ 

t"n©eratures e not t stable /tracking" due to.thermal la, as thj^. 

setpoint U temperature «BTC7 04. .dropped. Jus^ . it 

tas^exceeded^its^allowable ^sw°SU'Sken off-line 

actuator failure 
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for a garbage collection. The "BPRV failure" fault was then 
successfully repeated. TEXSYS correctly diagnosed a tailed 
Spin" IpRV and an "setpoint not stable/tracking" system level 

fault. 

A 70°F to 35°F nominal setpoint reconfiguration was initiate*!. 
"Excessive NCG buildup" was diagnosed and a total of 4.9 lbs. o 
a^onilwas vented. The setpoint temperature decreased only to 
40°F A false "single evaporator blockage" fault was indie 
as the heat load was decreased on the two-phase water beat 
exchanger while the surface delta temperature increased due to 
the drop in setpoint temperature. 

The setpoint was reconfigured to 70°F. The operator requested a 
nominal P setpoint change but the setpoint change task did not 
regie st heal load removal or wait for the accumulator to settle 
ou? before adjusting the BPRV position. TEXSYS ^ 

system mode defined as "setpoint decrease when * 
confirmation task (generated when the setpoint decrease task 
timed out above 35°F so TEXSYS suspected a BPRV faiiure) was 
aborted. A "slow leak" fault message was generated by spikes in 
accumulator position sensor reading (BPS702) . Several false 
"power draw out of tolerance" messages were also triggere y 

spikes in the RFMD power reading (BPW701) ; J^g^nSSnal 
reached 70°F, the bus was shutdown using the TEXSYS nominal 

shutdown routine. 

August 31. 1989= System startup was performed smoothly using^ 

TEXSYS. The setpoint was decreased from 77 F to fault 

TEXSYS "quick" setpoint change routine. An NCG buildup rauir 
message «s generated when the end-to-end delta pressure dropped 
lie title sltpoint decrease. The fault taskselftermrnate^ 
when the delta pressure was restored. A slow leak 
induced and 8.4 lbs. of ai™°ni» Yented causing an *==™ss?ully 
nnsition sensor decrease from 87% to 7 3%. TEXSYS successiuixy 
diagnosed the "slow leak" component fault and the losing flui 
inventory" system level fault. 

A setpoint change was induced using the TEXSYS nominal setpoint 
chlnge Routine. A setpoint of 35°F was requested! the system 
reacted ?0°F. Requesting a setpointof3o3F andventxngfarled 
to reduce setpoint further. During this time HITEX was reset 
after a plotting bug occurred. The setpoint was returned t 
70°F TEXSYS was taken off-line for a "garbage collec ion an 
an additional 7.2 lbs. of ammonia was vented. 

A TEXSYS nominal setpoint reconfiguration from p bo ^ c i^kW 
perfoLed. Variable heat loads at «' 
iT^ct Series 5D) and ended at 6.3 kW l Test series 

system became unstable (setpoint temperature began g^^ieated^n 
and end-to-end delta pressure dropped off) . TEXSYS indrcatec an 
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-NCG buildu P" and T he n ietpoint tempMature^^then reconfigured 
delta pressure. The |®| p nomina 3. setpoint change routine. TEXSYS 

was’ taken 8 of f-line to purge excess data from the model. 

•Single evaporator blockage fault- wa^attem^^tvice by closing 

MV0001 . system level faults -_ oer atures not stable/tracking” were 
tolerance- and -evaporator temperate Instance, calculations 
recognised by TEXSYS. In fi b being performed 

required for the component level .fault ^were^ ^ nodel . In the 

so TEXSYS was taken of the "single evaporator 

second instance, TEXSYS manual recovery procedures had 

blockage" fault so slowly that fkilur." 

already been performed. failure" component fault and the 

induced. The "pressure vstem level fault" were diagnosed by 

"erroneous instrumental Y bloc ] caqe " fault was induced by 

TEXSYS. An "single evaporator " eV at>orator loop flow out of 

closing BSV001. TEXSYS diagnosed evaporator 

tolerance" and "evaporator unable to diagnose the component 
system level faults. It was unable to ^i valve (BSV001) 

level "single evaporator block 9 nnrmai after the previous 

ilatis was not reset from abnormal^. ^^“^fault was 

S5TS terminate 6 th^days 

?onf?SS? S ion? d so e ?Se ?ime\o "safe" the system was excessive (8 
minutes) . 

C.pt ember 1. 1989: Syst ® m a |““t?atio n P includingt m -preiLrr nS 

the TEXSYS P”=* d “« s ; sl ^reSiporator blockage”, and -RFMD 
transducer failure § y --aeefniiv oerfornted for SSF 

motor failure" faults was s ^c®s| f |V YJg| shut down the bus as 

personnel. The bus sttbUit^ tIxIyS turned off the 

the system had almost reached stability, ^ a garb age 

RFMD because the S^^^^fSrned the RFMD on and the TEXSYS 
collection at the time TEXSYS ea^ that the rfmd waS running. 

model had not receive « fault was attempted by entering 

An "erroneous instrumental^. BDP00 i An "evaporator loop flow 

Q*J S of^tolerance- ."1.^^^ genS^ed ' by entering false values 

onto data channel BFM701. 

fa«it was induced and correctly 
"High coolant/ sink temp ® ra ^® series was terminated prior to 
diagnosed by TEXSYS. Th ® £® ? \ n S yltem level fault due to time 
inducing the "loss of ®^°f^tdSJm using the TEXSYS off- 
constraints. The sys activities were terminated. The bus 

wa^deserviced^'an^secured SSWpsig ammonia pad pressure on 

September 5, 1989. 
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6.0 demonstration test results 

This s ect ion presents th e TEXSYS test r. -» Its ^e la tingle ^ 

specific test ° b 3ecti ^ 25.0 kW and system setpoint tempera- 
load r ^J g ® o£° to 7 q°f during operational and demonstration 
testing ’Ll L^pointe wLe^successfuny a^mplis^ove^ 

-^^fs 1 su a s 0 s2 t siirts;s 

week (except where noted). a bus se tpoint temperature, 

output 6 for theHITEXESScontaining^information^about ™|* S GSS 

containin^data tabies^data plots, schematics and system status 
information are included in Appendix A. 

6.1 NOMINAL OPERATIONS 

TEXSYS oversaw and executed the following P^P^rammed^normal 

Reconf igurat ion^ Variable 0 Heat 6 Loads^and^System^Shutdown . These 

management sy s te^wil l°per f o^* f or 1 SSF . ^ aevelopnrent°™s tem^ 6 S To 
be 6 considered a" regime operational syst«s, analysis and q£ 

^S-TSSsot Sirss-^ 

anomalies result. 

The details of the Nominal operations performance are described 
in Sections 6.1.1 through 6.1.5. 

6.1.1 Startup - Test S eries 1 

system startup is performed according to the P r °«f^f„^|“ ibed 
? Y £ kil « i i 1 Startup of the TBS requires minimal TEXSYS 
m Table 6. 1.1.1. Star p turned on , valves must be opened 

^rs^s^^-va^s^re 

not'opened a? ^cor^™ stLtup stability can be delayed 
or possible aborted. 

During the demonstration week, ten 
i:romy le anli;r; 2 Utisfactory (see ^ 

The RFMD speed rose in * u it™Uot RFMD bearing flow to reach its 
iev^^ RF^ motor power draw reduced to a running level. 
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TABLE 10.1 SUMMARY OF COMPLETED TEST POINTS 



56 




















































TABLE 6.0.1 SUMMARY OF COMPLETED TEST POINTS 


COMMENTS 



EVAPORATOR TEMPERATURES NOT 
STABLE/TRACKING 
SYTEM LEVEL FAULT 

SETPOINT TEMPERATURE NOT STABLE/ 
TRACKING SYSTEM LEVEL FAULT 

ONLY REACHED 40 *F 





KUO NVENTORY OUT OF TOLERANCE 
SYSTM LEVEL FAULT 
VENTED 6 4 LBS AMMONIA 

ONLY REACHED 40 *F 




MAXIMUM WI1H SHEAR CONDENSER 

FOIR 

OPS 


X 

X 

X 


X 


l 

1 


■ 

■ 

■ 

1 

1 

NOMINAL 

OPS 

X 




X 



l 

I 


1 

■ 

■ 

I 

1 

TEST SERIES NAME | 

(NOP OR COMPONEf; < 

LEVEL FAULT) i 

STARTUP 

> 

EXCESSIVE HEAT LOAD ON SNGLE 
EVAPORATOR 

UJ 

5 

4 

u» 

ffi 

5 u. 
» m 

W D 

Q O 

T 

CL V“ 

fcr o 

Z N 

c 

</> 

jjj 

3* ^ 

fr o 
£ ^ 

RB 

a S- 

fc o 
2 

Si 

! 

STARTUP 

SLOW LEAK 

§ 

5 u. 

f? 

\k n 

RB 

£ t 

fc O 
Z N 

8 

§ 

5 u. 

fr o 

% rs. 

RB 

a S- 

t in 

2 M 

c 

CO 

SETPOINT RECONFIGURATION 
70 f TO 35 *F 

VARIABLE HEAT LOADS 

VARIABLE HEAT LOADS 

iT 

* ~ « 
z . » 

S ^ ° 
w J h 

UJ ffi 

o 

o 

o 

15 

© 

o 

1 

I 

in 

in 

m 

m 

in 

in 

m 

TOTAL HEAT 
LOAD (KW) 
BZQ011 

<*; 

V) 

3 4 

CM 

4.6 


« 

3.5 

1 

Mr 

in 

in 

■ 


m 

in 

e 9 

£ 

2 

a a o 

*- s 

UJ UJ CD 
<rt K 

77 

77 

70 

70 

70 / 40 

o 

o 

fs. 

40 / 70 

70 

77 

70 

70 / 40 

45 / 70 

in 

n 

o 

35 

m 

n 

TEST 

SERIES NO. 



o» 


CM 


D 

16 

1 

15 

CM 

n 

CM 

50 

s 

END 

TIME 

242:16:20 

242:15:56 

242:17:44 

242:21:47 

243:00:53 

243:00:44 

243:01:21 

243:01:52 

243:12:47 

243:14:04 

243:15:46 

ib 

n 

CM 

243:19:45 

243:20:15 

243:20:26 

START 

TIME 

242:14:11 

o> 

n 

W 

CM 

CM 

242:17:05 

CM 

CM 

CM 

CM 

242:22:10 

242:23:53 

243:00:53 

243:01:32 

• 

CM 

ri 

w 

CM 

243:13:52 

243:14:10 

• 

«r» 

n 

CM 

n 

m 

pi 

CM 

243:20:15 

243:20:15 
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TABLE 6.0.1 SUMMARY Of COMPLETED TEST POINTS 
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TABLE 6. 1.1.1 STARTUP PROCEDURES - TEST SERIES 1 


1.0 BUS PREPARATIONS: 

Verify manual valves are in the NORMAL valve configuration, 
except as follows: 

HV-N-05 - CLOSED 
HV-N-06 - CLOSED 
HV-N-07 - OPEN 

2 . 0 CURR ENT STATUS AND SHUTDOWN PANEL: 

Ve. '.f_ that CURRENT STATUS and SHUTDOWN PANEL is "ON’’ and 
switches are as follows: 

Isolation valve controller auto/manual switch to "MANUAL". 

Isolation valve switches for BSV705 and BSV706 are "CLOSED" 
(switches down and lights off) , and all other isolation 
valve switches are "OPEN" (switches up and lights on) . 

BPRV control auto/manual switch to "MANUAL" . 

BPRV control on/off switch "ON". 

RFMD power relay on/off switch to "OFF". 

BPRV motor power (power switch 1) on/off switch to "ON". 

3.0 SOFTWARE PREPARATIONS: 

Perform/verify DACS and FLEXCON startup according to DACS 
checklist NN-1018. Delete .SHR files. 

Start/verify DARS recording. After DARS is running, start 
DACS to DARS recording process from NASATEST menu. 

From NASATEST menu, start DATA REQUEST processes. 

From NASATEST menu, start AUTOSNAP, with 10 minute interval. 

Perform/verify TDAS startup if required for test. 

Perform/ verify TEXSYS startup if required for test. 

Perform/verify HITEX startup if required for test. 

Per form/ verify software links if required for test. 



TABLE 6. 1.1.1 


STARTUP PROCEDURES - 
TEST SERIES 1 (Continued) 


4.0 SOFTWARE UTIL IZATIONS: 

Run INITLOOP and run SYSCALC. 

screen. 

tS 1 ^ »» 

screen. 

Execute FACILITY.COM from [BASELINE. DAT ABASE] on flight 
facility subsystem. 

Execute BUSCALC.COM from [BASELINE. DATABASE] on flight bus 
subsystem. 


5.0 CONTROL PREPARATIONS^ 


Verify RFMD ana BPRV (both sides, are -OFF" as shown on the 
BPRV and RFMD manual DACS control screen. 

Configure the valves on DACS to match the BAC "anual^ane! 

g . 0 CURRENT STATUS AND SHUTDOWN PANEL ^ 

Change the valve power supply from 12 Vdc to 24 vdc. 

Put the isolation valve panel Auto/Manual switch to the 
"AUTO" position. 

Put BPRV control Auto/Manual switch to the "AUTO" positron. 
Put RFMD power relay On/Off switch to the -OFF’ position. 

7 . o CONTROL AND MONITORIN G PREPARATIONS^ 

Set the CRT privileges to both subsystem Aydin CRTS to "OFF" 
using CRTPRIVSWITCH. 

Set the System Aydin CRT privileges to "OFF" from the 
NASATEST menu (option 3). 

Prom the System Parameter Page, activate system CRTs number 
2, 3, 4, 5, and 6. 
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TABLE 6. 1.1.1 STARTUP PROCEDURES - 

TEST SERIES 1 (Continued) 

Verify sufficient paper for printers. 

Verify HITEX configured as desired if required for test. 
THERMAL CONDITIONING 

8 0 Verify facility cooling Cart C4 is set to 0 deg F (or other 
temperature per DAE call) for 70 deg F setpoint. 

9.0 Have DAE verify when the thermal stability of the Bus is 
achieved . 


10.0 PER DAE CALL: Configure Cart 6 to bypass Bus and 

precondition working fluid to 80 deg F. 

11.0 ET verify/set all Variacs (6 circuits) controlling heat to 
the Bus are set to "ZERO". 

12 0 on the CURRENT STATUS AND SHUTDOWN PANEL verify theoutput 5 
of the HP-6624 A power supply are at the followrng levels. 


DEVICE 


CHANNEL # 


VOLTAGE 


RFMD Speed Sensor 
Kill Circuit 

Absolute Press Transducer 


15 Vdc 
24 Vdc 
28 Vdc 


13.0 ET verify or switch ALL VARIAC breakers to ON 

14.0 DACS/TEXSYS/HITEX verify/set following valves to "CLOSE": 
BSV700 , BSV701 , BSV705, BSV706 

DACS/TEXSYS/HITEX verify/set following valves to "OPEN : 

BSV001 , BSV101 , BSV201 , BSV301 , BSV302 , BSV401, BSV402, 
BSV501, BSV502, BSV702, BSV703 

15.0 DAE verify valve setting as described above on the man 
panel. 

16.0 Verify /set BPRV position for 75 deg F setpoint. 

17.0 Verify RFMD power switch *£* RF^Swer^atu^UPW^ 50^ 
the "OFF" position and that the RFMD power statu*. 

on the DACS is "OFF" . 
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TABLE 6 . 1 . 1 . 1 


STARTUP PROCEDURES - 
TEST SERIES 1 (Continued) 


18 '° voltage^lit volts and^he ll^fre^cy to 400 Hz and 
push power "on" button. 

.... : “S.’S’K ffi “• — 

ss’«s ^^^nsssr»”“ sss “ i “”’ 

operations . 

„ OIHRENT STATUE AND SH.'DOWN PANEL, turn the RFMD 

cower relay on /off switch to ON position 
DAcI/TEXSxl/HITEX turn RFMD power to ON . 


GMT 


. «r M n speed (BNN701 on DACS/TEXSYS/HITEX and 
S2°Sn%Sr -Hearing flow rate (HFM703 on 

DACS/TEXSYS/HITEX and meter on panel) . 

. onnn ppm on BNN701 (and/or on panel) 
21.0 When RFMD speed U > 0.3 GPM, on the CURRENT STATUS 

and bearing flow B nacs switch s 

and SHUTDOWN PANEL (manual) or on DACS 

. BS V706 (accumulator vapor on/off isolation valve, to 
"OPEN" . 

- BSV701 (evaporator supply isolation valve) to -OPEN" . 

NOTE: If bearing flow ®™^ 3 close BSV70l!’ 3 If bearing flow 

8 oes 0 no a t n recover to” S?3 GPM, close BSV706 and shutdown 
RFMD. 

22.0 When the f “^ j'statos 0 ^ 

or"*!: DACS/TEXSYS/HITEX , ^switch - BSV700 (accumulator flow 
through valve) to "OPEN" . 

NOTE: Once RFMD s Pe efl on'DACs'nMdt ““^adju^ed 

2800 RPM/ the low speed v °* ue when the system is 

upwards (it is re f e J. *° J t of the day); therefore, 
brought on line at the ®^^ t ra i se BNN701 EU low alarm 

tTsssn se 

23.0 set the RFMD power supply voltage to 115 or to 75 Volts per 
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TABLE 6. 1.1.1 STARTUP PROCEDURES - 

TEST SERIES 1 (Continued) 

DAE request and RFMD frequency to 400 Hz. Record event time 
and voltage reading . 

RFMD Voltage 

24.0 Adjust Cart 6 flow and temperature to apply 3.0 KW (per DAE 
call) to single phase water heat exchanger as indicated on 
BZQ010, OR apply heat load to two phase water heat exchanger 
heater per DAE call. 

25.0 When the bearing flow is clearly abov the minimum flow rate 
(0.24 GPM on BFM703), on the CURRENT f 'T£ -US AND SHUTDOWN 
PANEL, push the low-flow relay switch to the "ARMED" 
position . 

26.0 Verify/adjust the BPRV position (Bus set point) for 70 deg F 
(as indicated on BPI752) manually or through 
DACS/TEXSYS/HITEX . 

NOTE: Once BPRV position is verified for 70 deg F, exit 

STARTUP macro before it adjusts setpoint. 

27.0 Proceed with desired bus operation. 

GMT : : : 
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TABLE 6 . 1 . 1 . 2 . SYSTEM STARTUP ATTEMPTS 
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and the system stabilized. Three times the startup was aborted. 

Time laas between DACS operator and TEXSYS perception of RFMD 
speed and bearing flow data caused conflict between the human 
operator and the TEXSYS "RFMD startup monitor task in the 
opening and closing of valves For -ample an operator might 
close a valve in response to low bearing flow, TEXSYS would tnen 
open the valve or TEXSYS might see low bearing flow when th 
system had already recovered and close a valve unnecessarily. 

This issue should be addressed in any future software 
modifications . 

During Demonstration Testing, the initial system ^^tup (Table 
6112 item 1) was begun with TEXSYS but completed manually due 
to problems in the TEXSYS "model-monitor" task. Following bus 
shutdown during "high coolant/sink" fault, the ™ s after 

restarted using TEXSYS (Table 6. 1.1. 2, Shortly ft 

TEXSYS reset the BPRV to request a lower temp ^^ U ^' g h ® ere 
flow relav triggered an automatic shutdown. Heat loads were 
“movll y *ese??in 9 the panel turned back on theRFMDsostartup 
was continued. The Pacific Power Supply was used to bring t 
p^p up to speed. Valves (BSV701, BSV700, BSV706) were opened 
and P closed repeatedly to establish flow. A ten second vent 
(BSV705 opened) was used to regain temperature contr 

establish end-to-end delta P ressure ' . Sys ^ n h ®Jabilize 

increased to 5.0 kW and the system allowed to stabilize. 

The third startup attempt listed in Table 6. 1.1. 2 was aborted due 
to isolation valve BSV502 failure. The startup foiiowingth 
valve work around (table item 4) was satisfactory. The D 

startup attempt was terminated due to low bearing f .a 

was reltarted (table item 6) through DACS and run < at reduced 
freauency to provide more power. Approximately 18 • 

were vented. Startup (table item 6. requrre, ^ end 

one-half hours to complete. An early declaration of steady stare 
on TEXSYS during startup resulted in the triggering of several 
* faults" S (conditions due to the startup rather than true faults) . 
These included: "power draw out of tolerance and evaporator 
loll A™ o«t of tolerance" . A "high sink/coolant temperature 
fault was declared for the twin condensers (off-line due to 
failed valve BSV502). 

Startups on the last two days of testing (table items 7 and 8) 

were smooth and satisfactory. System r ® s ^ a J‘ t startup 

September 1, 1989 demonstration required two attempts. Startup 
(see table item 9) was terminated after the system had almost 
reached stability . TEXSYS turned off the RFMD because the 
Svmbolics Operating System started a garbage collection a 

TEXSYS P turned the RFMD on and the TEXSYS model had not 

received 5 the^n formation that the RTMD ^i^ 

attempt (table item 10) was successful. Sample successful a 
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ragged startup GSS screen print is contained in Appendix A, page 
A- 2 , 3. 

6.1.2 Setpoint Decrease - Test Series _2 

TEXSYS provides two methods to decrease jetpoint ^"'P^^ominal" 
"nominal" and "quick" set p °int ch; ange ^ s ; tpoint by waiting 

setpoint change, reducing heat loads, and setting the 

for the system to stabilize, r . g ACS contr ol routines. The 

BPRV to the desired temperature The « quic k" setpoint 

procedures in Table * ’£he BPRV without checking for system 
change routine res . , TEXSYS successfully 

stability or decreasing heat ^s. TEXSYS su q i ick 

decreased the setpoint Routine ) . The quick 

routine and four times b y t e°peiature changes such as 

routine was typically used BO + n nint to 70°F setpoint for 

when decreasing from the startup *P change routine was used 

r h r a =iosrr r |tien?ion T o h t e o 5S? condition, was desired such as 

when decreasing to 35 F. 

_ . ,Q 1989 a 70°F to 35°F setpoint reconfiguration was 

initiated noninal 

setpoint change, TEXSYS ijjdic v P SP ike low), "excessive NCG 

(power sensor readings occasions y P bad teropera ture sensor 
buildup", and "high sink temperatur <| ba tha oper ator) . The 

NCG 6 ta sl^wa s° " succeeded""^ S o^Sut actual venting 
being performed. 

* 7 °° F t !S ^L^cen^e 1 ^^ 

total of |^?^as a inS!ca«a when*the heat* load was 

evaporator bl °^ a f® water heat exchanger while the surface 

decreased on the two phas drop in setpoint 

delta temperature increased due to nla E eaue d at 40°F. Two 

temperature. The setpoint temperatur P nominal TEXSYS 

70°F to 35°F setpoint reconfigurations using the «°»\ he first 
procedure were attempted “ t 31 , 19i ”nly 40°F. After 

«n e tT^' 7 ? 5 e ibs? P Sf n ^nrrsecond successful setpoint change 
was performed. 

TEXSYS monitored the reductionin aat ?^ 1 ” t ^atively unstable 
reliable manner. Because b “ s ,“ d -?o-end^ ^delta pressure is 

condition during setpom K»?*need) TEXSYS would at times 
low and fluid flows are not ba if^ e ^ e T gequently than was 
announce faults and deques 0 „ rator . The two reoccurring 
deemed necessary by the H pe but characteristic of 

rill"" transition^ were buildup of NCGs and evaporator loop 
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TABLE 6. 1.2.1 SETPOINT RECONFIGURATION (70°F TO 35°F) 

TEST SERIES 2 


NOTE: Operating condition should be stable prior to setpoint change. 

OBJECTIVE: Demonstrate operations to reconfigure the bus setpoint 

temperature from 70 W F to 35 F. 

1. Verify isolation valves are in nominal valve configuration, 
verify these readings go to zero • 
verify these readings go to zero • 

4 Decrease heat load for cold plate, cold rail, and two phase H20 HX 

' Variac e^V^lo^ is 1.0 

kw on BZW001, BZW002, and BZW003. 

5. Adjust BPRV to 35°F temperature (and 66 psia pressure). 

6 . If NCG buildup is indicated following setpoint reconfiguration: 

a. The setpoint temperature stabilises at a temperature above 
35°F, and. . . . 

7. Record current weight of the NCG/NH 3 collection system tank. 

8 . Vent NCG (manually or using automatic procedures). 

9. Monitor system temperature BTC704 P** ssure BPR703 ' 

until system achieves stability at 35 F setpoint. 

10. Proceed to next operation. 
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flow out of tolerance. 

HITEX ESS (showing a Task Tree graph and status ”®? sa9 ? s) a " d a GSS 
printouts are included in Appendix A, Pages A-4 and A-5, for a 
typical 70°F to 35°F setpoint decrease (August 29, 1989). 

6.1.3 Setpoint Increase - T est Series 3 

The TEXSYS "nominal" or "quick" setpoint change' P«” d “™ 
used to increase setpoint temperature. The nominal proceaur 
(described in Table 6. 1.3.1) increases the system setpoint by 
rallina for heat loads to be removed, waiting for system 
Stability and setting the BPRV to the desired temperature via 
the^DACS^contro^routine . Setpoint increases can also be made rn 
a "quick" manner by simply resetting the BPRV. 

The "nominal" setpoint change routine was used in three 
instances. On August 30, 1989. the setpoint 

from 40°F to 70°F. The operator requested a nominal setpox 
change but the setpoint change task did not request heat load 
removal or wait for the accumulator to settle out before 
adjusting the BPRV position. TEXSYS °P erat “ 5 ad 
mode defined as "setpoint decrease" when a BPRV failure 
confirmation task (generated when the earlier } was 

task timed out above 35°F so TEXSYS suspected a BPRV failure) 

aborted. 

On August 31, 1989 , the setpoint was • 15^58 to 

twice using the "nominal" routine from 45°F to 70 F (243. l &.:>» 
243*16*44 GMT) and from 35°F to 70°F (243:21:30 to 243. . 

GMT) 6 * TEXSYS also performed four quick setpoint change requests 
in conjunction with BPRV failure diagnosis on Wednesday (Augu 

30, 1989) . 

. Mmirai HTTEX ESS printout for a 35°F to 70°F setpoint change 
(243^21*30 to 243:22:10 GMT) showing task tree graph and messages 
IndaGSSprLtoutfor the latter portion of the setpornt changes 
are included in Appendix A (pages A-6 and A-7) . 

6.1.4 Variable Heat Loads ~ Te st Series 5 

During demonstration testing heat loads were varied at 5. 0 kw and 
10.0 kW at 70°F setpoint and at 5.0 kW and «.3 kWat loads 

setDoint This data is presented in Table 6 - 1 •' 4 * . , Hea * 
were° limited to relatively low levels due to the failure of the 
twin condenser isolation valve (BSV502). In each case, TEXS 
successfully accepted the varying heat loads with no fault 

announcement . 
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TABLE 6 . 1 . 3 . 1 


SETPOINT RECONFIGURATION (35°F TO 70°F) 
TEXSYS TEST SERIES 3 


NOTE: Operating condition should be stable prior to setpoint change. 

OBJECTIVE: Demonstrate operations to reconfigure the bus setpoint 

temperature from 35°F to 70 F. 


1 . 


2 . 


3. 


Verify isolation valves are in the nominal valve configuration. 
Turn off evaporator heat loads (0.0 total system load). 


Wait until accumulators stop stroking (approximately 
BPS701 and BPS702 position sensors should be stable 
least one (1) minute. 


5 minutes) 
(+/-2% ) for 


at 


4. Adjust setpoint to 70°F. 

5. Increase heat loads to desired levels. 

6 Monitor BTC701 and BTC704 temperatures and BDP703 delta pressure 
as 1 * system moves toward 70°F temperature and 110 psra pressure 
until system achieves stability at new setpoint. 


7. Proceed to next operation. 
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TABLE 6. 1 . 4.1 VARIABLE HEAT LOADS - TEST SERIES 
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6.1.5 System Shutdown - Test Series 16 

Daily system shutdowns during the TEXSYS test were performed 
using the procedures in Table 6. 1.5.1. TEXSYS provided two 
routines for system shutdown. The nominal shutdown calls for 
heat loads to be removed, waiting for the heat to dissipate, 
closes the accumulator isolation valve, and then turns off the 
RFMD. The emergency shutdown closes the accumulator isolation 
valve, turns off the RFMD, and then calls for heat loads to be 
removed . 


The first day of Demonstration Testing (August 28, 1989) was^ 
successfully terminated using the operator initiated TEXSYS off- 
nominal" shutdown procedure. Testing was terminated on the 
second day (August 29, 1989) by an emergency manual shutdown 
because of the leak at the liquid sight glass. The third day of 
testing (August 30, 1989) was successfully terminated using the 
operator initiated TEXSYS "nominal" shutdown routine. RFMD 
motor failure" fault was used to terminate the fourth day (August 
31, 1989) of testing. TEXSYS initiated the "off-nominal" 
shutdown procedures but required an excessive amount of time to 
"safe" the system (8 minutes) because the procedures had been 
inadvertently set to require operator confirmation. When the 
accumulator isolation valve stays open too long (as in this 
instance), ammonia enters the vapor side of the accumulator, 
increasing the difficulty of the next RFMD startup. The final 
day (September 1, 1989) of testing was terminated using the 
operator initiated "off-nominal" TEXSYS shutdown routine. 

See Appendix A, pages A-8, A-9, for ESS and GSS prints of a 
"nominal" shutdown (August 30, 1989) and page A-10 for an ESS 
print of an "off-nominal" shutdown. 

6^2 FAULT DETECTION, ISOLATION, AND RECOVERY OPERATIONS (FDIR) 


Fault detection, isolation, and recovery (FDIR) techniques were 
selected for inclusion in the TEXSYS knowledge-base. Ten 
component level faults (out of a possible thirty-eight) were used 
to demonstrate the seven system level faults. TEXSYS displayed 
and analyzed system status information and acted, both auto- 
nomously and in cooperation with the human operator, to attempt 
recovery of nominal system performance or safe system shutdown 
provided and explanations of these recovery actions to the 
operator. The faults included: 


System Faults 
Erroneous Instrumentation 


Component Faults 

Accumulator Position Sensor Failure 
Pressure Transducer Failure 
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table SYSTEM SHUTDOWN PROCEDURE - TEST SERIES X« 

OBJECTIVE : Demonstrate/evaluate system shutdown procedures 

1 Verify/adjust setpoint temperature to 70°F, as xndicate 
BP1752 (6120 mV) . 


2 . 


3. 


cri * -*** ' — 

Shutdown facility heater cart C6 to h “^ BFM 1 0 1 and 

BZQOlO^and “r if 5’ these readings go to "zero . 

Shutdown facility heater “f C Monitor”'now h on t BFWO 1 * Ind heat 
loa^on^BZQO 1 3^and ^^.."Sgs ,o to "zero-. 

Shutdown cold plate, cold ”11 . ^nd^two the 

power"reading t is zero on BZW001, BZW002, and BZW003. Set a 
power switches to "off". 

temperature , 0 (ETC00 3? BTC204°*BTC311^ and Btc5!5?“«p below 

Disarm the PFMD low bearing -flow auto kl11 relaY SWltCh ° n 
Current Status and Shutdown Panel. 

Close the accumulator vapor line isolation valve BSV706. 

Turn off the RFMD power (BPW750) . 

Allow all TC’ s to com. to *5“jJJ br |^ 7 S2,^c707 , ‘bTCTOS; 

^C^ 6 00n BTj^?%i B BT«^ of " * *• manual*** i£&°-£%pen 

--Should b/closed, 

10. on the Current Status g«£~ 

Turn B?Sv to manual. 

11. Shut off power to the Variac Heater Control Rack. 

w back up systems if required , ana 

l2 ‘ secure SSS. , w5?3m». H1TEX COmpUteI SyStemS ‘ 


6 . 

7. 

8 . 
9. 
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Fluid Inventory Out of 
Tolerance 

RFMD Power Draw Out of 
Tolerance 

Evaporator Loop Flow Out of 
Tolerance 

Inadequate Subcooling 
Setpoint Not Stable 


Slow Leak 


RFMD Motor Failure 


Single Evaporator Blockage 

High Coolant Sink Temperature 

BPRV Failure 

NCG Buildup 

BPRV Actuator Failure 


4. a tint Excessive Heat Load on Single Evaporator 

Evaporator Temperature Not Excessive 

Stable 

6.2.1 Won^Condenslble Gas jNCCj Iterating - Test Series ± 

NCG venting was performed numeroustime^during^the^E^VS^operation^ 
and demonstration NCG from RFMD ONCE, allowed the 

operato^to HXXEX CSS screen dump showing 

^nfv^,^«i^l^^ning. 

A TEXSYS task, Excessive NCG s “ a |oitiiied e parL^te?s , set by 

th^operator , P which C allowed^a variable sequence of vents desrgned to 

rest or^ system end-to-end delta pressure. 

o . vanno tfxsyS would at times request to 

During 70°F to 35°F setpoint change, TEXSYS wou operator. 

Tlh £^ 0 ^ Voided .artificially 

concluded) by the HITEX operator. 

6 .2.2 Accumulator Position Sensor Failur e - Test Series 6 

. • e Failure" was induced once successfully on 

"Accumulator Position Senso * Table 6. 2. 2.1. with the bus 

August 29, 19^9 7 o c^ 11 se tpoin t U temper a tur e 6 and a 5.1 kW total heat load, 

operating at a 70 F setpo failure” test series, a 

During the "accumulator P° s i accumulator position sensor (BPS701) 

voltage signal was induced on ar *r>rr>ximated the value on the second 
d£ta channel so that th %« a fndu C ed P voltage signtl caused the BPS701 
accumulator. Spikes in zero TEXSYS diagnosed an "extremely 

readings to dip momentar fauit" (component level) and an 
low accumulator position sensor « ^vstem level) . The HITEX operator 

"erroneous instrumentation fault (system le , ^ TEXSys> The 

turned off BPS701 sensor in response to a re 4 
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VENTING PROCEDURES 


(■ 2 11 N on-condensible GAS 

table 6. 2. 1.1 N est series 4 

OBJECTIVE: 

if present. 

, If ,CG buildup is indicated following setpoint reconfigura- 

f° n ihi setpoint temperature stabilizes at a temperature 

above 35°F, and... . u . or essure (BDP703) drops 

b. Condenser subcooling BTC704-BTC702>8 F, 

vent* NCG** from the^RFMD . 

2 . Record current weight of the NCG/NH3 collection system tan . 

mnA hv-N- 06 is Closed at this point 
note: HV-N-07 is open and HV N ue 

, 11v or using DACS automatic procedure) as 

3. Vent NCG (manually or using 

a Ol 0pen*the NCG bleed valve (BSV705. for TBD seconds 
* call) (DACS default^alue) . ^ default value) and 

b Wait TBD minutes (DAE can; 

' monitor BDP703. pressure (BDP703) is not restored 

c. If the end T to-end delt^p^ value), repeat steps up to 

S e s (DaI call) (DACS de ^ au ^ n v ;i"e ) Should not exceed 

NOTE: Total BSV705 elapsed oj^ value) during test. 

2 . minutes (DACS aex ibdp703) is restored, 

d. When end-to-end delta pressur <®° lection system tank ; . 

record fine 1 weight of NCG/NH^ vent tank# when venting 
•• S-JT’JS.-BSA. »nd open HV--07 ,a. regurred, . 

.„ re BTC704 and system pressure BPR703, 

«• until° system* achieves* stability at «°F setpoint. 


Proceed to next operation. 
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TABLE 6. 2. 2.1 


accumulator position sensor FAULT 

T«irrTTfiN PROCEDURES - TEST SERIES b 


Objective: 

procedures . 


1 . 

2 . 


4. 

5, 


verify accumulator position sensor BPS701 is -turned off on 
TEXSY S • 

Record current reading for accumulator position sensor BPS701 
and BPS702 from the DACS screens. 

Using the injection voltage source ^^g^ro^ely 
matches°DACS^BPS702 ^ngs.^IcU voltlge’and BPS701 and 
BPS702 readings. 

-Rehabilitate- (turn on) sensor BPS701 in TEXSYS. 

Drop the induced voltage slowly (and as smoothly as possible) 
to 5%. 

Record TEXSYS response (a low accumulator position 
failure is expected) . 


7. 

8 . 


’Turn off" sensor BPS701 in TEXSYS. 


Remove the injected voltage (return voltage to ”») at the 
fault injection panel. When “CS reading is out to 

condition and TEXSYS fault mode no longer exis p 
the next test series. 


NOTE: 


System should be in stable operating condition before 
performing FDIR procedures. 
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induced voltage was then removed from the data channel. 

version of the "accumulator position sensor failure 
A simplified version ox L, . depict ed in Figure 6.2.2. 1. This 

fault processing within TEX nath for fault processing as 

figure illustrates only one po romoonent fault rules which may 

thlre are eight accumulate posrtion^compon, '^omlues. Fault 
processing 6 occurs 1 ” during^ the expert system control cycle as described 

in Figure 2. 1.1. 1.2. 

• . e . i._ ut'ttfy screens are included in Appendix A. 

Hardcopy printouts of the HITE J ault messages, a task graph of 

The ESS printout (page A-12) cont nnt ifi ca tion from TEXSYS 
operator and TEXSYS D ff the faulty sensor. The GSS 

requesting that the operat eP hPmatic of the accumulator area, 

^Srst^urirforLSo^nd plots of accumulator positions (BPS701) 
and BPS702 ) and system heat loads. 

6.2.3 Pressure Transducer FajLlure - Test Series 7 

>1 failure" was induced three times (times listed in 

"Pressure transducer £ al ^ u testinq week using the 

Table 6.0.1) during the l^nstration^t, S tra „lducer failure" was 

procedures in Tab i e ,”- 2 . with the bus operating at a 7 0.5 F 

simulated in the following manner. With the | f 5-1 , 1.0 

setpoint temperature and a t °^ c ® y an erron eous pressure reading on 
volt signal was injected t heat exchanger ammonia inlet 

data channel BPR001 (two-phase - reading of 50 psia compared to the 
pressure) . This signal P b ° du «y Y | e *^"14| u ily diagnosed 
nominal reading of 144 psia. TEXSYS successful y . e ^ oneous 

•erroneous pressure sensor" <=°”P°nent level ^ instances and sent 

instrumentation" (system regiesting ^ BPROOl be turned off. 
The 6 !nduled voUage was ?hen removed from the data channel. 

A simplified version of the P|||® u ^ t ”" S || x |?s 1 is P depi“ed 9 in t Figure 
series performed August 28, 1989) expert system control 

6. 2. 3.1. Fault processing occurs during tne^exp * touts of one 

cycle as described xn Figure * creens a P ^ inc luded in Appendix 

sample (August 28, 1989) s contains fault messages, a task graph 

A. The ESS printout (pa j[ e I ification from TEXSYS requesting that the 
of TEXSYS actions and the notific ^ GSS printout (pa ge A-15) 

operator turn off the fau y . water heat exchanger, system 

includes a diagram of p f oressure (BPR001, BPR701, BPR201, 

rp^?."r^ sStK.Srnss.i! 


6.2.4 


Single Evaporator Blockage - Test Sene s 8 


Evaporator blockage was i^Table 0 6^2 A*" single 

-°- phase water heat 
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Accumulator position c a ns or BPS 701 la "turned on" In TEXSYS. 
A "nominal" value Is Inserted in the TEXSYS modal. 



Figure 6.2.2.1 . Simplified Accumulator Position Sensor 

Failure Fault Processing 
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TABLE 6 . 2 . 3 . 1 


PRESSURE 

INJECTION 


TRANSDUCER FAILURE FAULT 
PROCEDURES - TEST SERIES 


7 


Objective = inject 

IrSm Ihi DACS analog summary and HITEX screens. 

2. Apply a 1.0 volt signal and 

record e the U re suiting DACS and HITEX readings for BPR001. 

3 Perforin the following validity checks for BPR001 (record all 

'■“1= a", si asasrasw-vr- 

channels. . . . n < BPR001 < 230 psia. 

Check that BPR001 is in | BP r 201, BPR301, and 

Compare pressures BPR001, BPR101, ' psi (o dd 

BPR401. All readings should be within is psi 

pressure is erroneous). 

Recovery procedure: . fli egard data, use backup 

*• channel I C do”i 2?2 channel validation 

comparisons . 

Remove fault injection voltage source at ^the^fa^^j^ and 

?ir S « ffuU mode ^K ^ists. proceed to the next 
series. 


b. 

c. 


NOTE: 


System should be in stable operation condition before 
performing FDIR procedures. 
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( Pr— wire — n»or "failure" fault to Induod.) 


t 



Figure 6.2.3.1 . Simplified Pressure Sensor Failure Fault Processing 
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EVAPORATOR BLOCKAGE FAULT INJECTION PROCEDURES 
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exchanger by closing the ammonia 

twice) or by closing the a^onra inlet servo^ five times) . in each 

valve position updating "pvaDorator loop flow out of tolerance , 

case, the system level fault ^aporatorioop^ evaporator flow 

was successfully diagnosed y • h mvoOOI was closed and to 

(BFM701) dipped from 1.4 gpm to 0 . 9 gpm when « 
j t l _ 1,2 gpm when BSV001 was closed. 

When the blockage was induced by f Misdiagnosed fseconf system level 
(August 31 , 1989) . The evaporator 

fault, "evaporator temperatur 6 o F ab0 ve the setpoint 

outlet temperature was approximately^^ component leV el fault was not 

temperature. In the fir P model In the second attempt, 

being propagated properly throug evaporator blockage" was diagnosed, 
& rriSSfy.ibaf^falu^l^iirSere exceeded and manual recovery 
procedures initiated. 

a-oniQftQ^ attempt to demonstrate the. 

In the first (August 28, * B SV001 (8B) TEXSYS issued all 

evaporator blockage fault by closi 9 saqes but failed to toggle 
the expected diagnosis and reco y successfully diagnosed as an 

BSVoSlVn. The fault was repe in Shich TEXSYS 
"emergency level fault r , , loads and does not attempt to 

directs the operator to remove heat loads ^ f the fault 

toggle BSV001 . In the third repetits recQV ^ red by toggling open the 
was successfully dia 9£ os ® d _f” nent level fault was not diagnosed in the 
"sticking" valve. The (8B) (August 31, 1989) because 

fourth repetition of this test serie l mod el £roin the last 

the status of BSV001 had not been reset i^^ repetition (September 
repetition of 8A (operator erro ) • R fault was performed as a 
1, 1989) Of the single «l|ta?ion ^rsonnel! TEXSYS 

success fully'diagnose^an emergency level component fault. 

A simplified version 

Fau It S processing occurs during 1 Jj* T ^ P hardSpy e outputs° f o? V " s ingle 
described in Figure 2 . 1 .1 .1 .2 • «TEX haroc W v ^ lve BSV 001) and 
evaporator blockage fault alarm (TEXS deluded in Appendix A. 

"single evaporator blockage erne g y^ alarm messages and task tree 
The ESS printouts (pages A-16^ 8) rtinen t GSS printout (pages 

graph depicting TEXS * S activities. P a se water heat ex- 

1-17, A-19) data are the plots ^mplratures (BTC003, BTC005, 
B h T«?U.°SeifioadlBZwi03K ^total'evaporator supply flowrate 
(BFM701). 

6.2.5 Excessive Heat l£ad On Sinsle Evaporator - Test Series 9 . 

r ..i x n w&s induced 

once" successful ly & on^ the single^h^e'wSrheat exchanger using the 
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"Single evaporator blockage" fault to Induced on Mw two-phase 
water heat exchanger by dosing Isolation valve BSV001 (the 
updates of this parameter have been deactivated In the DACS 
> It wHI be "open" to TEX3Y8. , 


Evaporator loop how (BFM701) decreases. The data la Inserted 
Into the TEXSY8 model. Values are than propagated throughout 
the model and It le updated. 


An anomdous "very low" («1.1gpm) evaporator loop flow (BFM701) 

causes "Evaporator. Loop.Flow.OuLOf.Tolerance.Low.Faul LRuie" 
to fire. This rule declares that the system level fault mode 

"Evaporator.Loop.Fk>w.Oul-Of.Toteranoe" exlata 


I 


System level fault mode triggers 
reoovary task: "Evaporator.Loop. 
Row.OutOf.Tolersnoe.Raoovsry" 
which generates messages to the 
operator that the evaporator loop 
flow is out of tolerance. T EX8YS 
than sends msa s a g es to HIT EX. 


I 


on the bloofcod evaporator Incraa eej 


A vary high (34-4°F/l 
ratio ((BTCOOMTO 

(BTC0M-BTC011) pi 

Qf.Tolaranoa.Low" < 
fault rule "Taro- Phsi 
Fault RuW" to fire. 1 

"Slngie.Evaporator. 

<W) DT/W 
I11VBZQ003)), 

temperature 
lus system level 
Mor.LoopJFIow.OiiL 
muse oomponent 
w-Watar.Bloekage 
his rule declares 
level fauK mode 
Blookage” exists. 



r 

Component fault mode triggers task: 
"8lngle.Evaporator.Blookage.Reoo very" 

which: 

gmmntm iimmmqw to ihc HITEX 
operator that tha two-phaaa water heat 
exchanger appears to be blocked and 
that TEXSYS la checking Isolation valve 
function: 

Toggles valve BSV001 clearing tha fault; 
and then generates a message that valve 
BSV001 la sticking. 


Figure 6.2.4.1 . Simplified Single Evaporator Blockage Fault Processing 
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procedures described in Table 6. 2. 5.1. The TBS was operating at a 
70°F setpoint temperature and an initial total heat load of 5.0 kW. 

The Cart 6 water supply temperature was raised from 80 F to 92 
oroviding” increasing heat loads (BZQ010) from 5.0 kw (design heat 
load) to 9 10.0 kW. TEXSYS successfully diagnosed the e * caas ?; v ® 
load on a single evaporator" component level fault based on a he 
load of 5.2 kW, an increasing long term trend of the a ™J°^ a °f let 
temDerature (BTC104), and an increasing short term trend of the 
average^sur face temperature . The operator was Erected to remove heat 
loads from the heat exchanger. The “evaporators " o F 

«. V c t p m level fault was successfully diagnosed by TEXSYS based on o & 
difference between the ammonia outlet temperature (BTC104) an ® US 
system setpoint temperature (BTC704). The operator was directed to 
shut down the fluid heat exchangers and reduce heat loads on the 
electrically heated evaporators to less than 2.0 kW each. 

A simplified version of the "excessive heat load on a single 
evaporator" fault processing is described in Figure 6. 2. 5.1. Thi 
figure illustrates only one possible path for fault processing as 
there are three component fault rules which may trigger the 

"eS«s“ve heat load on single evaporator' fault an WtracSq" 

rules which trigger the "evaporators temperatures not stable/tracking 
fault. Fault processing occurs within the overall expert system 
control cycle as depicted in Figure 2. 1.1. 1.2. 

HITEX screen printouts are included in Appendix A p J he 

ESS printout (page A-20) shows alarm messages and a task tree grapn 
for thi^emand component level faults. The GSS printouts (page A- 
21 and 22) depict pertinent plot data and various system status data. 
The plots labeled STARTUP1 contains system setpoint temperature 
(BTC704 ) The plots labeled XEVAHL depicts single phase water Jj® a * . . 
exchanger da^:* surface (BTC106), outlet (BTC104) , and inlet (BTC1U) 
ammonia temperatures, and heat load (BZQ010) . 

6.2.6 RFMD Motor Failure - Test Series 10 

The "RFMD motor failure" was performed according to the procedures m 
Table 6261. The "RFMD motor failure" fault was simulated by 
shutting down the RFMD at the manual switch panel. RFMD : speed power 
and flows fall to "zero" but the computer databases still indicate th 
RFMD motor commanded "on". TEXSYS successfully diagnosed the RF*® 
mo t or ^ a i lure" component level fault and the "RFMD power draw out of 
tolerance - low" system level fault during both attempts during 

demonstration week. TEXSYS then "safed" the i^isSiation"^"^ 

RFMD "off", shutting the accumulator vapor line isolati 
(BSV705) and directing the operator to remove heat loads. * * t t 
recovery procedure was delayed by eight minutes on the first attempt 
(August^?, 1989) due to improper operator confirmation levels, 
was^epeated successfully on the second attempt (September 1, 1989). 

A simplified version of the "RFMD motor failure" fault processing 
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TABLE 6 . 2 . 5 . 1 


EXCESSIVE HEAT LOAD ON 
injection procedures - 


SINGLE EVAPORATOR FAULT 
TEST SERIES 9 


I. 


OBJECTIVE: Introduce evaporator temperatures not 

“ail?e/«a=king FDIR procedures. 

Record current one g^e a 2^^p«S?«r°BT?ioi.W106-BTCn f m 
SSrt current** lowrate (BFM101) and maintarn const 
during test senes. ^ Record time for 

Tncrease heat load on one P^ase H20 hx erature for approxi- 

BZQ010 to reach 6.0 kW. _5°?f delta" temperature exceeds high a arm 
mately 15 minutes. Record x heat supply immediately if d 

UmIt y <14.5°F at 6.0 Wj, R^> *>«* load BIQ 010 and 

de 1 t^temperature^BTCl 06-BTC1 11). 

increase heat load on one phase ^O.HX^toJ^O ^^ a ^ ure for 
for heat load to reach 7.0 • delta temperature exceeds 

approximately 15 ^Op®!^ 7 0 kW) shut off heat immediately i 
h!?h alarm limit (17°F at k „. Record heat load B2Q010 


hiah alarm xxm-L ^ _ 0 + 70 

an^de lta^ temper a ture** BTC 1 0 6-BTC1 1 1 ) 


»nn delta ... 

H , n nv to 8.0 kW and record time 

, increase heat load on °" e P^ase 2 onit or delta temperature for 
approximately 15 minutes off heat imme* ia«l j 

de 1 1 a* t emp e r a t u r e '«ceeds .^confinufinneasing heat 
loads* to* trigger* system level fault "evaporators not sta e 
tracking" . 

5 . Reduce one phase H20 HX heat load to 5.0 kW or les 

6. Proceed to next test series. 

, . h . m stable operating condition before operating 

NOTE: System should be in s 

FDIR procedures. 
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[ Continued on noxt page. 


Figure 6.2.5.I. 


Simplified Excessive Heat Load on a Single 
Evaporator Fault Processing 
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Continued from pwjgw p»g» 


System (suit mods triggers reoovery task: 

"Evaporator.temparatureejiotstablertrBoklng.heat. 
toed.shuLofljeoovery” which: generates a message 
for the operator diet the evaporator temperatures 
are unstable, some vapor outlet temperature Is > ST 
above the set point temperature, and heat loads need 
to be reduoed; and spawns subtask: 




Figure 6.2.5.I. Concluded 
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TABLE 6 . 2 . 6 . 1 


rfmd motor failure fault procedures - 
test SERIES 10 


. r.j i, irp fault to demonstrate RFMD 
OBJECTIVE: . 


1. 

2 . 

3. 

4 


6 . 

7, 


, B T)rnfii| an d RFMD speed (BNN701). 

Record RFMD power (BPW701) ana wnu y 

Disarm the RFMD low bearing flow relay on the current status and 
shutdown panel. 

«- •? mn 1 ate an RFMD motor failure. 
Manual shut off RFMD power to simulate an w 

Perform fault diagnosis procedures: 

a. verify 115 volts, 400 Hz, power is supplied to the RFMD 
motor circuit. 

isv - - 

sjvss Sr ' ‘ 

the power is zero, tne rauit 
Record RFMD power (BPW701) and RFMD speed (BNH701) . 

Perform hot restart procedures: 

a . 


Uilll w * 

Close evaporator liquid supply (BSV701) and accumulator flow- 

through (BSV700) valves. 

• a. s x fBr rfmd speed (BNN701) reaches zero and 
b Wait one minute after RFMDspeei rpm, open 

accumulato^vapor 1 ^?M^hro!lgh .BSV700, valves 

and evaporator liquid valve (BSV701). 

e. Rearm the RFMD low bearing flow relay on the CURRENT STATUS 

AND shutdown panel. 

e. Apply heat loads per Test Point A above and proceed to nezt test 
series. 


NOTE: 


m should be in stable operating 
Tming FDIR procedures. 


condition before 
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- r i Fault processing occurs 

JSS S' the demonstration to* 

The ESS printout (page A-23) includes “lar^messages A-24? shows" 

c vapor a tor^ supply 1 delta P pressure (BBP701, . 

6 2 7 BPBV Failure - Test Series ^1. . 

f | ; B l! V "BPR^failure^was^imulate^by^closing^MVOlll^in^the 

servo* line , cu "^ i °f temp^ature^BTCTOl) decreased series 

brium with the coolant sink i^Pjg^^durtng'the demonstration week. 

^^ u ^e"" was V incorrect l^diagnosedduringthis^f a iled^te st ^series ^ 

^FSrsHSSs** s S »Hi 

BPRV failure fault also . t ^ n 2 9 « evaporator temperatures not 
ignored by the °P«»« r L“tges l«”o thermal la, as system 

stable /tracking fault message 

nUplified version of the "ff fai lu|«; {"££ cSSS^SSuS 1 ^^ 

S3 “.'SSS'AJKA'i-S-S- i - zz n- _ 

HI TEX screen dumps show^g ^rtinent ^.are^nc a task graph o£ 

?^s5 s a!^s! pi ij. A £p|H^ is^issrsv^r 

coolant 6ink° temperature (BTC621) . 
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RFMD motor failure fault is induced by shutting down the RFMD 
v at the manual control panel without prior warning. 


RFMD speed, power, flows, and delta pressures decrease. The data is inserted into 
TEXSYS model. Values are then propagated througnout the model and it is updated. 


hFMD power draw dips "very.low" (< 100 watts) and 
fires. This rule declares that the system level fault 


’Power. Draw. Out. Of. Tolerance. Low. Emergency. Rule" 
mode exists. 


I 


I 


/"Fault mode triggers recovery 
task: "Power.Draw.Out.Of. 

Tole ranee .Low.Emergency. 
Recovery" which spawns task: 
"Shutdown.System.Off-nominal" 
and generates messages to the 
operator that the power draw 
dropped below the low limits 
and that the bus was shut down. 
TEXSYS then sends messages 
ytoHITEX. 


I 


“Shutdown.System.Off-nominal 
spawns subtasks: 


G 


T 


Close. Accumulator. Isolation. Valve 
which shuts BSV706 to prevent 
flooding the accumulators. 


0 


I 


RFMD.Off" which commands the 
DACS RFMD control block to the 
off state. 


I 


3 

) 


/"HeatXoadsTo .Evaporators.Turned.Off" 
spawns subtasks: 

"Shutdown-heater-cart-evap" which 
directs the operator to remove heat 
loads on the fluid heat exchangers, and 
"T urndown-electric-evaps" which 
directs the operator to remove heat 
loads from the electrically heated 
.evaporators. 

V — — ^ 


/c 


Conditions of: bus at steady 
state, nominal HFMD voltage 
and frequency, very low 
speed (<2700 RPM) plus 
system level fault mode 
"Power.Draw.Out.Of.Tolerance. 
Low.Emergency* cause 
component fault rule 
"RFMD.Motor.Failure.Rule" 
to fire. This rule declares 
that the component level 
fault mode exists. 


Fault mode triggers recovery 
task: 

"RFMD. Motor.Failure. Diagnosis' 
which generates messages to 
the operator that the system 
was shutdown due to RFMD 
motor failure. 

TEXSYS then sends messages 
to HITEX at the next HITEX 
update. 


FIGURE 6 .2.6.1 SIMPLIFIED RFMD MOTOR FAILURE FAULT PROCESSING 
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TABLE 6 . 2 . 7 . 1 


BPRV FAILURE FAULT INJECTION PROCEDURES 
test SERIES 11 


1 . 

2 . 


a. 


OBJECTIVE- inject BPRV failure to demonstrate setpoint not 
OBJECTIVE. st ^ ble/trackin g FDIR procedures. 

Record temperature BTC704 and BPRV position BP1752. 

lf setpoint temperature (BTC704) teaches 85°F at any time. Kill 
evaporator heat loads. 

Close MV0711, BPRV servo line valve 

Perform BPRV failure fault diagnosis: 

If initially at a steady setpoint condition «nd the setpoint 
deviates in one direction more than! F ^ 

minutes, and adequate s “kcooling * least 6°F delta below 

operation at the commanded '“point ^at l“' ndicated . To 

the comm^ded setpoint K * the setpoint to change in the 

confirm the BPRV laiiure, . Tf _ setpoint response 

direction opposite the devi ®^°”d a BPRV failure is confirmed, 
occurs in the direction commanded, a BPRV ran 

b. If all system health parameters are within^normal^ cQnstant 

system setpoint fluctuates by mor _ sticking poppet 

system heat load and coolant «”PJ|£ ^ ^ cont rolled (raised 
BPRV failure exists. If the s P coo lant temperature at 

or lowered) by raising or lowering fully open BPRV 

constant heat load, a s £j=£ P a * trend shoSs a continuing 

»n NCG 

minutes , 5 a’stuck ^osefSr^ar-closed BPRV failure is 
possible . 

5. When FDIR procedures are =°“Pl*“' ^„ C btc 704 temperature begins 
total (on eoldpate, others *«oK ^ o ^ 7 MV0711 P ve ry slowly so 

“ not P to C ° shock" 8 the° system. Return heat load to 5.0 KW. 

6. When system has restabilired. proceed to the next test series. 

BOTE: System should be in stable operating condition before perform- 

ing FDIR procedures. 
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■ BPR V failure fault is induced by tuning .he BPRV servo line 
valv e MV07H. 

'Setpoint temperature ^propag^t) throughout 

The data is inserted into TEXSY5 moo . 

the model and it is updated. 


„ * — N 

/With the bus at steady state, nominal 
RFMD speed and subcooling, desired 
setpoint setting and position indicator 
at 70°F, and BTC704 drifts 'very.low 
(more than 3°F) below desired setpoint. 

the "BPrtV.Steady-state.Fault.Ruie 

lires. inducing component fault 
v mode "Suspected. BPRV .Failure . 

t — 


Fault mode triggers task: 
"Confirm.BPRV. Failure" which orders 
a setpoint change of 10°F upwards, 
waits, and then checks for setpoint 
response. No response confirms the 
BPRV failure. New fault mode 
“BPRV. Failure" is asserted. 


I 


* — — \ 

/Fault mode triggers task: ' 

' "Diagnose.BPRV.Failure" which checks 
lor: a stuck-closed failure by looking 

for low condensate return flow and an 
increasing setpoint (negative result), 
a sticking-poppet fault by checking the 
recent time history tor frequent, 
recurring BPRV faults (negative result), 
and a stuck-open failure by requesting 
the operator raise coolant temperature 
10°F & tor a response. 

As BTC704 trend followed the sink 
temperature upwards, the component 
fault mode "BPRV.Failure.Open" was 
asserted. 


/with the bus at steady stale 
and BTC704 drifts more than 
3°F below the desired setpoint, 
the system level fault rule 

"Unstable. Setpoint. Steady-State. 

Fault. Rule" fires and declares 
the system level fault mode 
» "Unstable .Setpoint’ exists. 

v — i — = 


System level fault mode 
triggers recovery task: 

"Unstable. Setpoint. Recovery 

which generates a message to 
the operator that the bus 
setpoint temperature is unstable. 
TEXSYS then sends messages 
to HITEX at the next HITEX 
update. - 


Fautt mode triggers recovery^ tas . 

•BPRV.Failure.Open.Recovery" which 

generates a message to the operator 
that the BPRV has tailed open and to 
use the cooling cart to control setpoint. 

TEXSYS then sends messages to HiTt* 
at the next HITEX update. 

MURE 6.2.7 .1 SIMPLIFIED BPRV FAILURE FAULT PROCESSING 
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6.2.8 BPRV Actuator Failure - Test Series 12 

The “BPRV actuator failure " to? C f a i lure " was simulated 

ssiSiS ^Se^^tion ^.-^sst-syrsa 

manual mode at the Mnu f,^ s ”^^ a ? SlTEX and the bus failed to 
to 35°F command was issued thr 9 failure TEXSYS issued warning to 
respond, indicating a BPRV actuator failure. to have moved, that 

the^operator that the BPRV actuato , TEXS ys reset the setpoint to 
setpoint change ... ”ion (August 29 1989) , 

70°F (August 28, 1989). In t fired issued a message to the 
the recovery task also correct y ' oosition sensor had failed 

operator that the BPRV ««at^ drive or posrtion^en^^ The BpRV 

and directed the operator to ^ “wmLic mode following completion^ 

of” the^ fault simulation procedures. * ^^EXSY^i^depicted in Figure 
| ^^ t -5°SSS'« *2^ system control 

cycle as described in Figure 2. 1.1. 2. 

_ r. ■ . i v a The ESS screen dump (page 

HITEX printouts are inclu ^ ges and a task graph showing 
A-27) contains fault and status me g A -28) displays system 

TEXSYS activities. The GSS screen °™ P nt P r | st from the B PRV actuator 

failure 1 faul^ are 0 included in the Pi 

6.2.9. High Pool ant /Sink Temperature - Test Series 13 

The "high coolant/sink temperature" . 2 . 9 . 1 . With 

the demonstration test week ^^vSem Seat load at 4. 5-5.0 kW the 
the system setpoint at 70 F an Y to 57 o F an attempt to 

sink coolant temperature was inc: f^^gling” fault. The first attempt 
induce the system level loss of of bus control and 

(August 28, 1989) was termina The seC ond attempt (August 1, 19 

emergency shutdown of the syste the sink temperature at 60 F. 

was terminated due to lac J^ t leve l "high coolant/ sink temperature 

in both instances, the . c ° mp J2®"5s 1 Loss of system stability was 
(55-56°F) was diagnosed TEXS . red b y Y low end-to-end delta 

indicated by "NCG buildup fault trigge J lt8 . "evaporator 

pressure, "fluid inventory out of tolerance xau „ High 

and/or setpoint temperatures no vj een used to induce the " loss 

sink/coolant temperature operational testing (July 21, 1989) 

" ?ocess of raisin9 sink temperatur 

to avoid losing system control. 

A simplified version of the "high coolant/sink “”^ r £ U |ep icte^in 


92 


1 . 

2 . 

3. 

4 


on r&TT tTRE FAULT INDUCTION PROCEDURES 
, _ o i npRV ACTUATOR FAILURE 
TABLE 6. 2. 8.1 ® e P s R ; s A eries 12 

. BTC704 and BPRV position BP1752 

, Record temperat Xssue command to 

/•manual switch into manual positi 
Put BPRV auto/manual swi^u 

• Sxsvs to change setpoint to 35 F. lMdI . 

,f temperature (BTC704, reaches B5 F. P r , Uure 

.-STUSS «»•-» “• »• 

setting «iU not change. return setpoi nt 

5. When fault diagnosis p |°| e |pRV S a“o/mInual switch into auto 
position*^ 6 Verify P-er restorea to BPRV drive. 

6. Proceed to next test series. 

note- System should be in stable operating condition be 
ing FDIR procedures. 


I 
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BPRV actuator failure laull is induced by putting the BPRV control 
into manual mode. 


The operator initiates a "Quick Setpoint Change" on HITEX and this 
command is passed to TEXSVS. 


Tpyc-ve- initiates the "BATBS-Automatic-s Vtpomt-contror task which through 
TDAS, fnitiates the DACS control routine to change the BPRV setting ^o 35'F. 
Atte- 90 seconds the task checks the BPRV actuator position. As the BPRV 
pot 'ion remains unchanged, the operator is notiliedthattheposmonchange 
was not accomplished (and that the setpoint change failed), and the comma d 
BPRV positior :s reset to its initial value (70°F). 


With nominal subcooling, end-to-end delta pressure, and temp erature 
instrumentation (BTC702 and BTC704). the difference between the 
desired setpoint <35*F) and the constant posttion mdicato and 
actual setpoint temperature (70'F) causes the componen. fault rule 
to fire and assert that the fault mode •BPRV.Actuator.Failure exists. 



Fault mode triggers recovery task: 

•BPRV. Actuator. Recovery" which notifies the operator t^t 'he ac.ua.or 
drive or position sensor has failed and to monitor the system for 
stability. 

TEXSYS sends these messages to HITEX during the next HITEX update. 


FIGURE 6 .2 .8.1 SIMPLIFIED BPRV ACTUATOR FAILURE 

FAULT PROCESSING 
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TABLE 6 . 2 . 9 . 1 


high coolant/sink temperature fault injection 

PROCEDURE - TEST SERIES 13 


objective: ' 

1 Raisa coolant temperature fault to determine minimum level of 
subcooling required. 

. i a f HTC704 — BTC702) and record 

Monitor condensate return ^temperature < 8°F) and low 

violation of the low warnrng ldelta temp^.^ , naaequa „ 

1 , L__ Me>lta temperature < 6 F) 11 m . , _ — ~ i a mnflule 

alarm (delta temp condenser o 


.eating inadequate 

subcoolin9 fault", 

hig^cooTant/sink 5 temperature i.»lt i. indicated. Record delta 
temperatures if this occurs. 


BTC502 

BTC504 

BTC506 

BTC508 


BRC613 

BTC605 

BTC603 

BTC601 


n^cord any violation ox 

3 - low'alarm^^psidt .^confirmin^the inadequate subcooling fault. 

4 . Return coolant temperature to 0°F and proceed to next test serres. 

note: system should be in stable operating condition before 

performing FDIR procedures. 
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High coolant/sink temperature fault is induced. The sink 
temperature (BTC612) increases to 55°F. 


New data for BTC612 is inserted into the TEXSYS model. 


The new value is propagated through the model and the 
model is updated. 


A very high (55«F) sink temperature (BTC612) causes "High.Sink^ 

Temperature. Fault. Rule" .0 «re. This rule asserts Ihal componen, 
fault mode -High.Sink.Temperature- exists for the Shear Flo 
Condenser. 



Fault mode triggers recovery task: 


"High. Sink. Temperature. Recovery" which generates an alarm ^essage 
to 9 the operator that the sink temperature is very high for the shea 
flow condenser. 

TEXSYS sends these messages to HITEX during the next HITEX update. 


FIGURE 6 .2.9.1 SIMPLIFIED HIGH COOLANT/SINK TEMPERATURE 

FAULT PROCESSING 
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fault processing. There are three generic component fault rules each 
of which may apply to any of the four condensers. There are also 
three system level "loss of subcooling’’ fault rules. Fault processing 
occurs within the expert system control cycle as depicted m Figure 


occurs 
2 . 1 . 1 . 1.2 


HITEX screen printouts for the component level fault are included in 
Appendix A. The ESS screen dump (page A-29) shows a TEXSYS task graph 
and alarm messages. The GSS screen dump (page A ~ 30 J, ® ystem 

status information and coolant temperature data (BTC621, BTCbl^, 

BTC614) plots. 


6.2.10 NCG Buildup - Test Series 14 

NCG venting for the "NCG buildup" fault series was performed according 
to the procedures in Table 6.2.10.1. TEXSYS successfully diagnosed 
that NCG buildup was present in the thermal bus system following the 
reservicing required after the sight glass leak. 

A simplified version of the "NCG buildup" fault processing is shown in 
Figure 6.2.10.1. Fault processing occurs during the expert system 
control cycle as described in Figure 2. 1.1. 1.2. 


A HITEX ESS screen dump shows an excessive NCG recovery task graph and 
alarm messages (in Appendix A, page A-31). A HITEX GSS screen dump 
(in Appendix A, page A-32) includes plots with deterioration m end- 
to-end de It a pressure (BDP703) and NCG venting (valve BSV705 opening) , 
and other system status information. 


NCG buildup was deliberately introduced during the 
at 35°F by injecting helium gas (on August 4 r 1989) 
the "NCG buildup" fault and NCG venting was performed 


operational testing 
. TEXSYS diagnosed 


6.2.11 Slow Leak - Test Series 15 

The "slow leak" fault simulation was conducted according to the 
procedure in Table 6.2.11.1. During the Demonstration Test week, the 
"slow leak" test series (16B) was performed at a 70 F system setpoint 
temperature and a 5.4 kW total heat load. An accumulator position 
decrease of 88% to 75% resulted from manual venting of 8.4 lbs. of 
ammonia over a 12 minute period. TEXSYS successfully diagnosed a 
"slow leak" component level fault and a losing fluid inventory 
system level fault. 


A simplified version of 
is depicted in Figure 6 
possible path for fault 
rules which may trigger 
rules which may trigger 
Fault processing occurs 
as depicted in Figure 2 


the "slow leak" fault processing within TEXSYS 
.2.11.1. This figure illustrates only one 
processing. There are two component fault 
the "slow leak" fault and five system^ fault 
the "fluid inventory out of tolerance" fault, 
within the overall expert system control cycle 
.11.1.2. HITEX ESS printout (page A- 33) 
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INJECTION PROCEDURES 


TABLE 6.2.10.1 


ncg buildup FAULT 
TEST SERIES 14 


OBJECTIVE: ^ermine ^effect^of the ability of the 

UltZ to effectively remove the NCG. 

NCG INJECTION PROCEDURES (If required,: 

y inject (TBDI amount of gas at steady-state setpoint. 

' amount of gas injected. 

2 . Record system transients following gas injectron untr 
state is achieved. 

3. After completing gas injection at I? 0 setpornt change. 

reconfigure system for r . r 
non-condensible gas VENTING PROCEDURES: 

x. Kecord current weight of the NCG/NH 3 collection system tanK. 

note- HV-N-07 is open and HV-N-06 is closed at this point 
2 Vent ' NCG .manually or using DACS automatic procedure, as follows: 

value) 

n .« c default value) and monitor 
b . wait TBD minutes (1.5 minutes DACS default 

mnp703, is not restored above 

- UP to S times ,DACS 

default value) . 

* a. ita pressure (BDP703) is restored, record 
d - f h rnai e we'igSro? NCG/NHj collection system tank. 

a, A onen HV-N-06 to vent tank. When venting is 
- fna clo “ HV - N ' 0£ - 

e- v-o BTC704 and system pressure BPR703 , 

3 ‘ OTtii°system*echieves*»tabilit y at setpoint. 


4. Proceed to next operation. 


Proceed 0 * 

H0TE! rinutefVDAls'defa^tT.luet^u^ng^es^ 

a if reauired to ineintein 

NOTE: capability°or accomplish setpoint change. 
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The bus is in setpoint temperature 
decrease mode, with nominal 
subcooling and RFMD speed. The 
downward trend of BTC704 has 
leveled off. End-to-end delta 
pressure (BDP703) is very low 


vj : — : 

1 


✓ \ 

r The new data is inserted into the 

TEXSYS model. Values are propagated 
through the model and the model is 
^updated. J 


i 

The very low BDP703 value and the 
previously noted conditions cause 
•NCG.Setpoint.Change.Fault.Rule" to 
fire. This rule declares that fault 
mode "NCG. Buildup" exists. 

1 

r 


Fault mode triggers task 
•Excessive. NCG. Recovery" which: 
informs the operator that NCG venting 
is beginning and to record the weight 
of the NCG collection tank and calls task: 

"NCG-Burped-Once* in a loop through 5 sets 
of 6 vent valve (BSV705) opennings of 
2 seconds each or until end-to-end delta 
pressure is no longer very low. 

and then prompts the operator to record 
the weight of the NCG collection 
tank and to vent the tank if desired. 


FIGURE 6.2.10.1 SIMPLIFIED NCG BUILDUP FAULT PROCESSING 
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OBJECTIVE: 


table 


6 . 2 • 11 •! 


SLOW LEAK FAULT PROCEDURES - 
TEST SERIES 15 


Inject slow ieak fault to demonstrate fluid inventory 
1*1 ^ tolerance FDIR procedures. 


TEST POINT A 

1. Reconfigure system to 70°F setpoint, then adjust parameters per 
Test Point 15A. 

2 - “ a 

_ . . nsed open valve MV0804. Verify HV46 closed. 

3 Verify MV0807 is closed, open 
Verify HV45 open. 

bv DAE to simulate a slow leak. 

4. Open MV0807 partially as requested by 0 

a. v 4 -rt -fill with HV-N-05 open and 

5. Allow NCG/NH 3 collection tank to fill 

HV-N-06 closed. nib 

. _ht scale and close MV0804 as weight approache • 

6. Observe weight scare wm 

charge. 

7 ‘ positions^BPS7 01 S£oi*STS»7M. 

8 ‘ Qg^end^the^closing^HV-M^C^whe^venting^s^complete ?^* 01 ' 


test point b 
1. 


POINT » . NCG / 

Record current values 

BP^702 ^an^pressures BPRoil and BPR 701 . „ 5 

2 open MV0807 . Allow NCG/HB, collection «nk fl full tank 

Record empty tank weight. 

3 Repeat above steps until accumulator reach low limits. 

‘ ... f me fA 

4 . 


Rcp6At dwvc — 

Observe flowmeter, during slow leak [ £K 

^ 1 ’° 

' .a I’M 


r »te it-urn oowj . . 

. IBTC703) § evaporator outlet 

s - ^.tSis^sTcoirgcis^ 

SS off heat supply to affected evapor • 


100 



8 


TABLE 6.2.11.1 (Continued) 


When accumulators reach low isolation valve (BSV70C) , 

supplies, close accumulator ^ relay switch on the 

PANEL , and turn off »® power 

(BPW750) . 

Record current values of: 

a. Weight of NCG/NH3 collection tank. 

b . Accumulator positions BPS701 and BPS702. 

c. Pressures BPR001 and BPR701. 

Proceed to system shutdown. 


NOTE: System should be in stable operating condition before 

performing FDIR procedures. 
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Durina a window of approximately 15 minutes after steady state or a new 

heat ?oad is reached, the "Bellows.Postion.Historical.Delta.Reading .Taken. Rule 

fires every 3-4 minutes while these conditions axist. This rule triggers the 
task ’Historical. Snap. Shot’ that records the changes in accumulator position 
^(historical delta) used in slow leak fault detection. 


Slow leak fault is induced. Accumulator position decreases as 
ammonia is vented over time. 


New value for BPS702 is inserted into the TEXSYS model. 


The new value is propagated through the model and the 
model is updated. 

— — “ 

"conditions of steady heat load (for at least 3 7J°X7low 

trend (for at least 4 minutes) of accumulator position (BPS702 , and a very low 
■historical delta' cause •Slow.Leak.From.Bellows. Position. Delta. FaultRule to 
tire This rule declares that system fault mode 'Losing.Fluid. Inventory an 

component fault mode ■Slow.Leak.From.Bellows.Position.Delta.Fautf exist. 



•Losing. Fluid.Becovery' which Issues a warning to the operator that 
•BATBS accumulator trends at steady state Indicate a loss of fluid 

inventory". 

•Slow.Leak.From Bellows.Posltlon.Delta.Fault.Recovery which issues an 

alarm to the operator that the bellows position decreased 7/. or more 
at steady state and steady heat load so a slow leak was diagnosed. 

TEXSYS sends these messages to HITEX during the next HITEX update. 


FIGURE 6.2.11.1 SIMPLIFIED SLOW LEAK FAULT PROCESSING 
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showing alarm messages and a Task Tree graph and a GSS 
A-34) with accumulator position (BPS702) data plots are 


printout 

included 


(page 

in 


Appendix A. 
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7.0 SYSTEM PERFORMANCE EVALUATION 

7.1 TEXSYS OPERATION 

TEXSYS successfully completed all the nominal^operatiOj^a^y 

KSSSS because S of r problems witfUhe valve moni; tor -^caused 

by excessive acquisition and subsystem to 

cycle time included the D 5S s to TDAS processing, TDAS internal 

system level ^2°!® TEXSYS network processing, TEXSYS internal 
processing, TDAS to TE . „ TEXSYS to HITEX network 

data manipulation and reasoning , t^ combination of DAC s 

processing and H 1 TEX internal p proce ssing, and TEXSYS cycle 
update rates, time lost in cvcl ! times. TEXSYS 

time contributed to the excess t 1 Conditions within the 

successfully analyzed the MS status from all ten component 

and" from se^n system level Fault Detection, Isolation and 
Recovery (FDIR) conditions. 

TEXSYS in effect became ^^“^lo^Jce^Siiila^^that o/a 
the Test Manager (TM) . TEXSYS perxorm^^^ ^ efficiency in 

novice operator, requir. 5 function very well overall, 

procedures. TEXSYS did nowev , quickly announced. 

« -J$r~ 
— is 

could only be partially resolved by TEXSYS. 

TEXSYS internal computer cycle ti^e ^ a ® tonqer^as accumulated 

performance. The cycle ^ a 7 S da ? a ) delayed response to changing 
"garbage" (stored historical data) deiayed^re^p ^ fQr 

bus conditions. The s ystemh »g arbage « collection (deletion 

data°f rom° files )^ to offer ?he pro. la,. 
Communication between tompuKrs was als^a problem.^ The^link^) 

of ten* failefl X several S times 25S* d^ng^rational Testing but 
Sas more reliable during Demonstration Testing. 

7.2 HUMAN INTERFACE TO THE THERMAL EXPERT SYSTEM (HITEX) 
OPERATION 

HITEX provides aiphanumeric and t“ t r h e°2xpert system 

health and the operator d Graphics System Screen 

via its Expert System Screen (ESS) and =«pn y _ Marnings , 

(6SS) . The ESS displays expert system i^ ^ rule trace s) of 
?i a u!?°;ro«fs a iSg: St giap^«i f inx-tree display of expert system 
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processing, and log entries in a procedur^explanation 
YorZt Provisions have been command interface to 

capability. The ESS ® g coin ponent commands, and a 

procedure* 3 confirmation , to allow varying SnKl of 

“H ! provided" including* startup"** setpoint change. KC= 

venting, and shutdown. 

The GSS displays thermal ^schematics , plots, and ta es 

toggle^by" selecting & the valve and the appropriate command wrt 
the mouse . 

, ^ be a reliable source of information. 
The HITEX screens proved ti ° t a b les provided on GSS gave a quick 
The schematics, plots, an background required to make 

view of the bus health and the bacKgroun^^^g concernin g the 

decisions. The ESS P r °^i steps TEXSYS was taking to maintain 
health of the bus and the steps t hical Task Tree that 

that health. The ESS ha ^ . vities that P TEXSYS was following to 
showed the sequence of activities 

achieve an operation. 

HITEX has some deficiencies that be 

operational system Data „•£££" ImSES- ofthe graphical 

very slow, especially from TEX ®*®* . but deprives the 

Task Tree speeds up data The ability to change screen 

operator of useful rnfo^atron. The aoii^ acceleratea . use 
configuration on both GSS and ^5S u “ reUable . The mouse 

of the Mouse was sometimes si . , computer and an 

commands were htvfto ^“«ued to. restart the 

"initialize Mouse | ss explanation and diagnostic 

mouse process, ^th t E deliver useful, high-level 

informat ion°in C a P format the operator can understand. 

7.3 TEXSYS DATA ACQUISITION SYSTEM (TDAS) OPERATION 

, . , translation between 

TDAS provided an efficient and re r^TEXSYS/HITEX on the Symbolics 

DACS/FLEXCON on ^e VAX system and TEXSYS/H^ encQU a au . t o 

System on most occasions. Soi me P dating . As expected, an 

lost network links and act ^®. ^lirinc operational testing to 
iterative process was required during oper (al lowable variation 

arrive 1 at Workable during the 

in data parameter values). tdas> pex 

demonstration . 


7.4 uAiA 

The DACE monitoring functiwi provided information for ^onitorrng 

thermal bus performance. Tne oa 


DATA ACQUISITION AND CONTROL SYSTEM (DACE) OPERATION 
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provided reliable control of the bus operations. TEXSYS used 
DACS to perform valve opening and closure, BPRV setpoint change, 
Non-condensible Gas (NCG) venting, and RFMD power on/off. All 
were accomplished routinely during the test. 

7.5 DATA ACQUISITION AND RECORDING SYSTEM (DARS) DATA 
ARCHIVAL 

The DARS system was utilized during the test for data storage. 

The archived data was used for HITEX archived plots. 

7.6 THERMAL BUS OPERATION 

The BA developed prototype Thermal Bus System (TBS) provided a 
stable and reliable platform to test TEXSYS. During nominal 
operations, it provided reliable and consistent operation. Bus 
conditions could be consistently repeated. This all °^ ed ^® st 
profiles to be repeated for TEXSYS demonstrations. The TBS 
proved to be a robust system. Faults could be induced and held, 
in some cases, to bus instability. After fault removal the bus 
could be returned to nominal operating conditions. 

Three bus anomalies developed that required special bus manage- 
ment techniques to continue operation. A quick disconnect 
fitting in the pump module section had developed a very slow leak 
(noticed during the initial system ammonia fill) , but was deemed 
to be manageable. A larger leak (ammonia liquid dripping on the 
chamber floor) developed through the vapor sight glass on the 
afternoon of the second day of Demonstration Testing. The system 
was shutdown with no damage to equipment or harm to personnel and 
the ammonia charge vented. The sight glass gland nut was 
tightened, ammonia added to the bus, and testing continued. The 
twin condenser isolation valve (BSV502) failed closed on the 
morning of the second day of Demonstration Testing. This remo e 
the twin condensers cooling capacity. Coolant flow was reduced 
to the twin condensers, diverting all bus heat load to the shear 
flow condenser at a reduced heat capacity of 12.0 kW. 

7 . 7 LESSONS LEARNED 

Several anomalies appeared during the TEXSYS Demonstration that 
resulted from three basic issues. The issues are excessive 
computer cycle time, "garbage" collection, and software 
robustness. As a developmental system, TEXSYS w d s successful. 
Continued growth to an operational system will require attention 

to these issues. 

Computer Cycle Time: The total cycle time for TEXSYS to 

under s ta ndbus HatSTi and to be able to institute a procedure is 
dependent upon three variables. The time required to acquire 
data is dependent upon the DACS data acquisition cycle time. The 
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• • ___ xkp through the communication links to 

transmission or tne aara un t y «ai i v tfx^yS has 

TEXSYS adds to the DACS acquisition time. Finally, TE 
TEXsio . mw.. e the architecture and the model 

its own model cycle time. Thus tn , tfxeys The long 

Sl n ?L^ SSEtSl’XS -KT and tie sending of demands three or 
four times, made startup by TEXSYS too slow. 

"Rarhaqe" Collection (purging computer memory of excess 

During - normaT”TEXSYS^operations , large amounts of date 

accumulate and consume memory resources between 
collections. TEXSYS does not normally purge data unless the 
operator° initiates these procedures The the 

required 3 longer^nd “Sur ^testing 

thecLptaer tad to be taken off-line for one hour 

while "garbage" collection was performed (typically 1 „‘ jj; „ 
dailv) The Symbolics also has an on-line ephemera g 9 
collection that automatically takes the computer °f f -J;^e for 
short C periods . Ephemeral garbage collection caused TEXSYS to 
abort a^ startup when RFMD "on" status information was not 
received. 

ii^on- line ^reliability SfSS 

:^ri: g ^cS^^o^nd lost 

newori links is excessive. Operation without presence of an 
experienced software expert should be possible. 
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8.0 CONCLUSIONS and recommendations 

8.1 CONCLUSIONS 

The TEXSYS test statio^Therroil^oitro^System 

and FDIR Of a ^t??le wlrl suScessfully completed. The 

(TCS) prototype tes * ar * x X fnr _ the required nominal 
TEXSYS system was able tope and shutdown, and FDIR 

operations: startup, setpoint change an Although TEXSYS 

performance^ during certain^speedcritical ? ta«up activities-^ 

the^real-time 5 control control 

system. 

.... _ TR capabilities and fault prediction via trend 

monitoring V and^analysis^unavailable through the conventual 

control system. 

8.1.1 DACS/ Thermal Bus Operations 

The DACS monitoring, and control ^"^^^^gt^reliably^providing 
DACS operated successfully throughout the test re t * € P bus and 

bus data to TEXSYS. When ^^^Botinq pro^^e thermal bus 
supported FDIR pr °?®J? res * table platform against which to test 
proved to be a reliable, ? handle 12.0 kW heat load 

software. It could, to a failed valve. During 

during the last week of tes g return to operation after 

the test, the bus showed the ability to return 

fault injection and removal. 

8.1.2 HITEX Operations 

HITEX provided al P han ^®| X ^ h g n bU s r s?atus^ ^ia the ESS, the 
that allowed knowledge of the b appearing in the bus and the 

operator wa ® ^^^xSYS^as^ Undertaking. The operator could also 
operations that TEXSio . via tbe graphical 

initiate procedures to pertaining to the bus could be 

screen, the engineering Schematics allowed the operator to 

IZTJ? d^ 1 " Sr 5254. to^its^location on the bus. 

8 1.3 TEXSYS Operations 

TEXSYS successfully display®da n d analysed the thermal bus^sysfem 
health to successfully ^ose each FD £££* Procedures (NOP) 
institute a recovery. All the Nominal^ (partiaU y 

were successfully complet , p problem for TEXSYS 

successful). Starting the bus up was^ p Le £sons Learned). 

because of excessive computer cycle uun 
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8.2 RECOMMENDATIONS 


O • <£ 

Though the^TEXSYS^test^objectlves^to^demonstrate^AI ^ issu es 

that 1 will make TEXSYS/HITEX more efficient. 

8.2.1 TEX SYS 

The way TEXSYS ^ at ^JJ s T gxlYS a cycle d time! te The items which impact 
evaluated to decrease TEXSYS y d and rep rogrammed to 

slpeed up^TEXS Y S S time^ for evLts. 

8.2.2 HITEX 

HITEX functions should also be ^^J^atio^wit^HITEX should be 

^Tlrtl'rZ ty?"S^ “r^tSTShould be examined for 

possible improvement in reliability and spee 

,, art rpauired to make the system more 
Better explanations are also required 

user-friendly. 

8.2.3 Thermal Bus 

Tf the BATES is to be used in the future, the burned out 
isolation valve BSV502 should be replaced. 

8 . 3 SUMMARY 

rmrvcvc HTTEX TDAS # DACS » DARS , and 
The Thermal Expert S ¥ s ^ e ™.., f ^ t s ^ey requirements for monitor 
BATBS) suecjessfully met a pDIR. Except for some time- 

and control of normal operationsan adequately han dled bus 
critical startup activit f . . TEXSYS recognized and 

operations under nomina * fo r t ' en component level faults. As 

sof tware C re liability 1 an^ma in ta inability^ is recorded to make 

TEXSYS an efficient operational tool. 
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